General

  • Target

    clash.apk

  • Size

    13.8MB

  • MD5

    2ad24b6b3242afd470d4f80cccbad7b5

  • SHA1

    538eaa85c1ab0dac65fe5900b2e09c6d26df000d

  • SHA256

    ef0bb3f7e7b557030808e0534fa885355f26e2179e9a47e855a86b444720828c

  • SHA512

    2a472a383df4937c6c06945ee3fec0d37660fc7b5c8e556435568b7b86cd5cef33890d91d5e06491d72058e340bb0e624637976ea1a987834e2cce57f53bc7cb

  • SSDEEP

    393216:XqQFnrRyLGsPDNzrZKaZVIcPeDQNEUx/dQ2UqnVc/7WP:XV0LGOdGEHNFx/dQ5qVcTWP

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • clash.apk
    .apk android arch:arm

    com.github.kr328.clash

    com.github.kr328.clash.MainActivity


Android Permissions

clash.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

com.github.kr328.clash.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

moe.shizuku.manager.permission.API_V23