General

  • Target

    ExpressVPN v10.94.0 [Premium] [Speed].apk

  • Size

    32.4MB

  • MD5

    90e0669bdd32be2f02a69f077c69bdd6

  • SHA1

    2cc911080330f731c4e48da891adf14b49d65bb6

  • SHA256

    8b25b1737cff05d7e0c7636be95304f21b60a96185f8772025733faff0e7da65

  • SHA512

    a1df5c8562cf949189a4e7285717b8fc6b95c0d3880a94ea94cf358642b9c9b07b0469656daa8fb2f067bdb9153c287c4b1300aff7f3f101b48b7ec614f25fca

  • SSDEEP

    786432:ZWJtvTIFSLeZLKnUhaQpuIS5qOEu6vgGBy+p7dm:ZWHsmoSX6A+J0

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • ExpressVPN v10.94.0 [Premium] [Speed].apk
    .apk android arch:arm64 arch:arm

    com.unlimited.unblock.free.accelerator.top

    com.unlimited.unblock.free.accelerator.top.splash.SplashActivity


Android Permissions

ExpressVPN v10.94.0 [Premium] [Speed].apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED