General

  • Target

    ProtonVPN-5.3.15.3.apk

  • Size

    74.9MB

  • MD5

    815c12142674de9f436640a0348b17af

  • SHA1

    c637d406aad042e36911f812824244628890083c

  • SHA256

    35c0548576fe4866c60fe3230e91ef855fae7523ce23eb8b0ce54ce4f99412b2

  • SHA512

    dd8a85a6e231a53b6491415e4615a894b54eefa5ef096fbaa22d767491168c77909ebffdeda52a4d4f87e9211c619a3e4205f686be9e64da24fc0d4c36d5f904

  • SSDEEP

    1572864:hQVLSksPq/EZcjpsX2l0VtimAE/bIu7v4dX1JF31qZH8joUwYTZ6tmQfpIk:qtnZEZcoqiAibRWDF3lqpr

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • ProtonVPN-5.3.15.3.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    ch.protonvpn.android

    com.protonvpn.android.ui.onboarding.SplashActivity


Android Permissions

ProtonVPN-5.3.15.3.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

ch.protonvpn.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION