AAA[.]wg[.]1[.]0[.]2[.]apk

General

Target

AAA.wg.1.0.2.apk
Size

8.5MB
MD5

fb9db55c162ca1956641984e900206ff
SHA1

025158f620fdd04637d8aae56ec1b39bfcf5f148
SHA256

d8d882aad20eebc8fb5f515273f73ac734cd69750f45f6ecdaab7bfcf55c84fe
SHA512

145d09da6ff7c5a6c1b81122d32d55a0caa62a4e05b604a994a229a974872216704006811e09c7808fe39c4aa9903a5684568d635c260504d1293ae16c168fd7
SSDEEP

196608:5MgV0l7HZXmmXtRJtqus2icCWgJvHqrrWZysDFGMxH4f+HrRRF:qj5HJtqNNDJvKrCysDFpH4f+LRj

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 4 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

AAA.wg.1.0.2.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.wireguard.android

com.wireguard.android.activity.MainActivity

Activities

com.wireguard.android.activity.MainActivity

android.intent.action.MAIN
android.service.quicksettings.action.QS_TILE_PREFERENCES

com.wireguard.android.activity.TvMainActivity

android.intent.action.MAIN

com.wireguard.android.activity.LogViewerActivity

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.wireguard.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.wireguard.android.BootShutdownReceiver

android.intent.action.ACTION_SHUTDOWN
android.intent.action.BOOT_COMPLETED

com.wireguard.android.updater.Updater$AppUpdatedReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.wireguard.android.model.TunnelManager$IntentReceiver

com.wireguard.android.action.REFRESH_TUNNEL_STATES
com.wireguard.android.action.SET_TUNNEL_UP
com.wireguard.android.action.SET_TUNNEL_DOWN

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.wireguard.android.QuickTileService

android.service.quicksettings.action.QS_TILE

com.wireguard.android.backend.GoBackend$VpnService

android.net.VpnService

Android Permissions

AAA.wg.1.0.2.apk

Permissions

android.permission.CAMERA

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.wireguard.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.wireguard.android

com.wireguard.android.activity.MainActivity

Activities

com.wireguard.android.activity.MainActivity

com.wireguard.android.activity.TvMainActivity

com.wireguard.android.activity.LogViewerActivity

Permissions

Receivers

com.wireguard.android.BootShutdownReceiver

com.wireguard.android.updater.Updater$AppUpdatedReceiver

com.wireguard.android.model.TunnelManager$IntentReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.wireguard.android.QuickTileService

com.wireguard.android.backend.GoBackend$VpnService

Android Permissions

AAA.wg.1.0.2.apk