General

  • Target

    6a237d92a4813a98fbddaee0018e9bea058adfdc3e18c72d4c751696c40a50e0.zip.zip

  • Size

    33.5MB

  • MD5

    7808395afa2aa946e186de0a44563172

  • SHA1

    3a09024b42a6ca7343f3f76eda0c3364941df2fb

  • SHA256

    1313aa3774d38f362aff2341db0893b2820252922f981601ce1fca4e2ced37aa

  • SHA512

    29249a3cfd3bdd7f09e1a617e4f542e51d3e0eb26f41e803aac1f39c62562bb66f3d6ed469db3006f805d1647cf0d34c49a26f277fc7fe538b52bfbeba9e5599

  • SSDEEP

    786432:dEelqGNl43fKCT1z/ybmoMgZTiWlStxkCc4DedLwAZsybe:dNIGOSCT1DybmdntuCc4aBv7e

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • 6a237d92a4813a98fbddaee0018e9bea058adfdc3e18c72d4c751696c40a50e0.zip.zip
    .zip

    Password: infected

  • 6a237d92a4813a98fbddaee0018e9bea058adfdc3e18c72d4c751696c40a50e0.zip
    .zip
  • GLTunnel.sql
  • admin.php
    .html .js
  • app_config.php
    .js
  • base_app/base1.apk
    .apk android arch:arm64 arch:arm

    com.gltunnelvpn

    com.gltunnelvpn.activities.SplashScreen


  • baseline.prof
  • config.json
  • geoip.dat
  • geosite.dat
  • logo.png
    .png
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • proxy_packagename.txt
  • update
  • v2ray_config.json
  • base_app/base2.apk
    .apk android arch:arm64 arch:arm

    com.glmod.tunnel

    com.akl.activities.SplashScreen


  • config.json
  • logo.png
    .png
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • update
  • categories.php
    .js
  • class/conexao.php
  • class/del_config_user.php
  • class/enc.php
  • class/export.php
  • class/func_clone.php
  • class/func_del.php
  • class/import.php
  • class/msg.json
  • class/msg.php
  • class/salvar-admin.php
  • class/salvar-app.php
  • class/salvar-cat.php
  • class/salvar-config.php
  • class/salvar-tema.php
  • class/topo.php
    .html
  • class/topo2.php
  • config.php
    .html .js
  • expirado.php
    .html
  • index.php
    .html .js
  • login.php
  • profile.php
    .js
  • raw/auth.php
  • raw/config.php
  • raw/error_log
  • raw/tema.php
  • static/assets/css/extras.1.1.0.min.css
  • static/assets/css/login-style.css
  • static/assets/css/shards-dashboards.1.1.0.min.css
  • static/assets/css/signin.css
  • static/assets/css/signin.css.bak
  • static/assets/css/styles.css
  • static/assets/img/avatars/4.png
    .png
  • static/assets/img/favicon.png
    .png
  • static/assets/img/logo.png
    .png
  • static/assets/img/shards-dashboards-logo.svg
    .png
  • static/assets/js/app/app-blog-overview.1.1.0.js
    .js
  • static/assets/js/extras.1.1.0.min.js
    .js
  • static/assets/js/jscolor.js
    .js
  • static/assets/js/shards-dashboards.1.1.0.min.js
    .js