General

  • Target

    6e40e06f292d6fd88cca9167a13558322c3a9ec1b6fa627ef29cf2a175e47514

  • Size

    21.4MB

  • MD5

    23af348b01e94484ffa9bdcc927be6e7

  • SHA1

    b910fa98c6283d3d6f285ba4bad38ab683eab398

  • SHA256

    6e40e06f292d6fd88cca9167a13558322c3a9ec1b6fa627ef29cf2a175e47514

  • SHA512

    e5abfd92bc42b07129bb3ed989d072b6b8adbc58a4d95662d280a2e64709c79a02fc35945aa658479ad4dfe20a4e70a00404ac4c01f64d75300b1b333ce19670

  • SSDEEP

    393216:K6w8irVgF+9gbHJW/FjNvoEU3pQApvCtSiixFiz798CEDyEKUZ:K6w7qEgNWNNolvRF679xEDdN

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 6e40e06f292d6fd88cca9167a13558322c3a9ec1b6fa627ef29cf2a175e47514
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.alberun.vpn

    com.alberun.vpn.controller.activity.SplashActivity


Android Permissions

6e40e06f292d6fd88cca9167a13558322c3a9ec1b6fa627ef29cf2a175e47514

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.android.vending.BILLING

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

com.alberun.vpn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.READ_PHONE_STATE