HTTP Custom_5[.]1[.]26-RC77[.]apk

General

Target

HTTP Custom_5.1.26-RC77.apk
Size

11.2MB
MD5

e50a8e292cbd233aa99147f33fccfad9
SHA1

3a35ad076cf53dbe5c007e50ae19ad19a1be22cd
SHA256

d75c97545d24c1bfdc24372cb17814ccc2648c34fd66df5f7cf8fa65957fd979
SHA512

3284414728ab45e881ca50125101c021c7cc4ed92bc15c1cb3889c7389a02c267c2a6ba56a32507c877eaef0ae85042804c3cddcbb545e2750560d440009c72d
SSDEEP

196608:TmgVpCDlhWm33fv7fAEkNJW1MqSDWdc6c52PS6oTS0DvbLJjTAuO8xD6J+O03BZC:TmeC7W2PvbCqMGdcfdDvbhAS6J+ZW

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 8 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by voice interaction services to bind with the system. Allows apps to handle user voice interaction.	android.permission.BIND_VOICE_INTERACTION
Required by voice interaction services to bind with the system. Allows apps to handle user voice interaction.	android.permission.BIND_VOICE_INTERACTION

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

HTTP Custom_5.1.26-RC77.apk
.apk android

xyz.easypro.httpcustom

team.dev.epro.apkcustom.MainActivity

Activities

team.dev.epro.apkcustom.MainActivity

android.intent.action.MAIN

team.dev.epro.apkcustom.activities.ConfigImport

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

de.blinkt.openvpn.LaunchVPN

android.intent.action.MAIN

Permissions

android.permission.QUERY_ALL_PACKAGES
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
com.google.android.gms.permission.AD_ID
android.permission.RECEIVE_BOOT_COMPLETED
xyz.easypro.httpcustom.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

team.dev.epro.apkcustom.sockets.SSHTunnelService

android.net.VpnService

team.dev.epro.apkcustom.sockets.socks.SocksVPNService

android.net.VpnService

team.dev.epro.apkcustom.sockets.psiphon.PsiphonVPNService

android.net.VpnService

team.dev.epro.apkcustom.sockets.v2ray.V2RayVpnService

android.net.VpnService

team.dev.epro.apkcustom.sockets.udp.UDPService

android.net.VpnService

de.blinkt.openvpn.core.OpenVPNService

android.net.VpnService

team.dev.epro.apkcustom.widgets.assist.AssistDroid

android.service.voice.VoiceInteractionService

Android Permissions

HTTP Custom_5.1.26-RC77.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

xyz.easypro.httpcustom.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

xyz.easypro.httpcustom

team.dev.epro.apkcustom.MainActivity

Activities

team.dev.epro.apkcustom.MainActivity

team.dev.epro.apkcustom.activities.ConfigImport

de.blinkt.openvpn.LaunchVPN

Permissions

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

team.dev.epro.apkcustom.sockets.SSHTunnelService

team.dev.epro.apkcustom.sockets.socks.SocksVPNService

team.dev.epro.apkcustom.sockets.psiphon.PsiphonVPNService

team.dev.epro.apkcustom.sockets.v2ray.V2RayVpnService

team.dev.epro.apkcustom.sockets.udp.UDPService

de.blinkt.openvpn.core.OpenVPNService

team.dev.epro.apkcustom.widgets.assist.AssistDroid

Android Permissions

HTTP Custom_5.1.26-RC77.apk