AAAoutline-1-11-0[.]apk | Triage

Sharing

General

Target

AAAoutline-1-11-0.apk
Size

13.0MB
MD5

5e0e5256238b69dd2e86d6564f85685b
SHA1

6826c2d48d8b0f32711b2901c0966f1767cc4d43
SHA256

9cdf037fde06590256c8640ebe3b0f6664f969ba23edd3665c1e129036ac3d50
SHA512

00130f7aee8a740e3709fef0355c226efa23b3bfb8fed1314b4c04f54245d9e3dd8efa8c99e4b5ffe68d16ffdb85fa5712a018e11a14f84a328532ebaee29241
SSDEEP

393216:obu1gdlfEzWPdGRlV9UmsKvbU5ZNXqB5HtRp:GuKiAGR9UtWwdgtX

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

Processes:

description ioc

Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE

Files

AAAoutline-1-11-0.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

org.outline.android.client

org.outline.android.client.MainActivity

Activities

org.outline.android.client.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

org.outline.vpn.VpnServiceStarter

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.borismus.webintent.WebIntent$ReferralReceiver

com.android.vending.INSTALL_REFERRER

Services

org.outline.vpn.VpnTunnelService

android.net.VpnService

AAAoutline-1-11-0.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED