Overview

overview

7

Static

static

7

iKHfaa+VPN...om.apk

android-9-x86

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    iKHfaa+VPN_1.3_apkcombo.com.apk

  • Size

    26.9MB

  • MD5

    fb46d51352d5eef272fd1439aa8ef65d

  • SHA1

    acade1acd546df95cd7285d00aee14be484d0bd4

  • SHA256

    4f3f60cdd49eecc2bcf483694bad722dd6984e2e6095ec38e576be1d7ba94d4e

  • SHA512

    b7d086fa0f59e1c58796a8a8174a732480be6d79ba35eb84cef42ccb30c133685704d4157d95a3eb0b259b6b7d705f004c0b054d39e5b8895f7aa35aac6a1350

  • SSDEEP

    393216:P7JSnCApHCWELocl22xytzTIgTsTj8T3T7TWeTFTv86CVKVqq:P7rApHpSkk5DKb

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • iKHfaa+VPN_1.3_apkcombo.com.apk
    .apk android arch:arm64 arch:arm

    com.securityapps.ikhfaavpn

    com.security.apps.ikhfaa.vpnapp.view.activites.LoginActivity


  • 142384-connect-vpn.json
  • baseline.prof
  • friends.json
  • invite.json
  • japan.ovpn
  • korea.ovpn
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • sweden.ovpn
  • us.ovpn

Android Permissions

iKHfaa+VPN_1.3_apkcombo.com.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SECURE_SETTINGS