Resubmissions

12/06/2024, 17:23

240612-vym69ssgqd 8

07/06/2024, 13:02

240607-p959bshe65 8

General

  • Target

    SKALA VPN_4.3.7 (1).apk

  • Size

    5.1MB

  • MD5

    a0ea7d0b4be176648f43af85c1501a64

  • SHA1

    dee41252c7a6739d11adf4f7fa75ff429e69c44c

  • SHA256

    bc4397ac74d42b0b83877221c35e14318e1c7a9411441e3fd34d55e0ba801d10

  • SHA512

    bf11b8436fb25da7e5df8321d7f67433314747397fb60cb3d77819d3e161fe1c0ee412bf43bf57a94f1f9611f38b26198269c3c57426799d95be1b44c373d2cb

  • SSDEEP

    98304:mAy9P+FXZCBfqHGhM2hEABO7Dy3vifU+qxDoLlr5x:mLloZLgEmZ3vi89De5x

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • SKALA VPN_4.3.7 (1).apk
    .apk android arch:arm64 arch:arm

    com.skalanetpro.pro

    com.dtunnel.presenter.MainActivity


Android Permissions

SKALA VPN_4.3.7 (1).apk

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.skalanetpro.pro.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION