General

  • Target

    881b5cd104b13c52fb3451b183006571f66e11a783002430e86b7fe646dba2f5

  • Size

    24.4MB

  • MD5

    2b8779826c2e0b1240f869496e72255c

  • SHA1

    62f809030f99c3f9753ccad2553888bc57dcdb3a

  • SHA256

    881b5cd104b13c52fb3451b183006571f66e11a783002430e86b7fe646dba2f5

  • SHA512

    e32092d475fcd8659861f7888e876c2c8af64e5157dd6f2b930254a6e8af91f944b376f75d513fdd1943369100c097a83c7c6b15c25889765e7f716880dc5cbd

  • SSDEEP

    393216:i0Y1xcyrWrmzmu34xVPNzJUDknEhRgEXVe4MnjMmpHrgEXBe46wQ5p4cSM3fqRal:PYoyarjfRkknIjFeTnom1jReaoGiWP4

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 881b5cd104b13c52fb3451b183006571f66e11a783002430e86b7fe646dba2f5
    .apk android arch:arm64 arch:arm arch:x86

    com.freevpn.unblock.proxy

    com.freevpn.unblock.proxy.splash.SplashActivity


Android Permissions

881b5cd104b13c52fb3451b183006571f66e11a783002430e86b7fe646dba2f5

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

com.android.vending.BILLING

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.freevpn.unblock.proxy.permission.C2D_MESSAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS