AAAOlineV1[.]12[.]1[.]apk | Triage

Sharing

General

Target

AAAOlineV1.12.1.apk
Size

13.6MB
MD5

7c85932ee309fe53e3da1b52b08ab231
SHA1

85255dc8a4085644dcd984c17aa881b67e7b6f1f
SHA256

74b99a307b562bb2e61cad33e5a3d1bc4d5a0caffe620f329b1262aa74293d8b
SHA512

503c5c7ba17edb22b88361cfd065fed22aeb0208f3ba4b34aac37d55b93a3106533491a0f2f2ee8de0518706dafae889774e0e470de6e72387a556b12049d0cc
SSDEEP

393216:EpazKOUKNyPm1nhHhZ9fFobs/OfxBmzXQhabZaWI:ItOXNB1hBZNFbOfxBmDuf

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

Processes:

description ioc

Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE

Files

AAAOlineV1.12.1.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

org.outline.android.client

org.outline.android.client.MainActivity

Activities

org.outline.android.client.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

org.outline.vpn.VpnServiceStarter

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.borismus.webintent.WebIntent$ReferralReceiver

com.android.vending.INSTALL_REFERRER

Services

org.outline.vpn.VpnTunnelService

android.net.VpnService

AAAOlineV1.12.1.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED