e33f3af9e18a6d6af2e7616eba7e4e8967b64607f5124557f0795c496f9e3d5e

General

Target

e33f3af9e18a6d6af2e7616eba7e4e8967b64607f5124557f0795c496f9e3d5e
Size

26.5MB
MD5

ef3f337e801b4cc92a082a423fb9211d
SHA1

cf1c91c60893444d513742da4a626a1f37e2ed96
SHA256

e33f3af9e18a6d6af2e7616eba7e4e8967b64607f5124557f0795c496f9e3d5e
SHA512

c8a19daf2962e9eb7434f01a2996d759cdb4fbfb71bacedfc5ef770dd799a0cbbd42fb06dd89d923711da88347fe1e9cbaaf420a97d4f4f7afddffa379f88933
SSDEEP

786432:nYw8wd69ftT1VlweZ3b6XrJf7w3b8O4o27xEfw9bjt0:nYtwd69ftxwexb6tcgOFJo9N0

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

e33f3af9e18a6d6af2e7616eba7e4e8967b64607f5124557f0795c496f9e3d5e
.apk android arch:arm64

free.vpn.unblock.proxy.turbovpn

free.vpn.unblock.proxy.turbovpn.activity.StartupActivity

Activities

free.vpn.unblock.proxy.turbovpn.activity.StartupActivity

android.intent.action.MAIN

free.vpn.unblock.proxy.turbovpn.activity.PushProxyActivity

free.vpn.unblock.proxy.vpn.master.pro.livechat

Permissions

android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
com.android.permission.GET_INSTALLED_APPS
android.permission.CHANGE_NETWORK_STATE
android.permission.WAKE_LOCK
com.android.vending.BILLING
com.google.android.gms.permission.AD_ID
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_AUDIO
android.permission.POST_NOTIFICATIONS
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

free.vpn.unblock.proxy.turbovpn.service.LanguageChangeReceiver

android.intent.action.LOCALE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

zendesk.support.DeepLinkingBroadcastReceiver

zendesk.support

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

co.allconnected.lib.ACVpnService

android.net.VpnService

free.vpn.unblock.proxy.turbovpn.service.AppFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

e33f3af9e18a6d6af2e7616eba7e4e8967b64607f5124557f0795c496f9e3d5e

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.QUERY_ALL_PACKAGES

com.android.permission.GET_INSTALLED_APPS

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

free.vpn.unblock.proxy.turbovpn

free.vpn.unblock.proxy.turbovpn.activity.StartupActivity

Activities

free.vpn.unblock.proxy.turbovpn.activity.StartupActivity

free.vpn.unblock.proxy.turbovpn.activity.PushProxyActivity

Permissions

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

free.vpn.unblock.proxy.turbovpn.service.LanguageChangeReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

zendesk.support.DeepLinkingBroadcastReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

co.allconnected.lib.ACVpnService

free.vpn.unblock.proxy.turbovpn.service.AppFirebaseMessagingService

com.yandex.metrica.MetricaService

com.yandex.metrica.ConfigurationService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

e33f3af9e18a6d6af2e7616eba7e4e8967b64607f5124557f0795c496f9e3d5e