SKALA VPN_4[.]3[.]7 (1)[.]apk

General

Target
SKALA VPN_4.3.7 (1).apk
Size 5.1MB
Sample240607-p959bshe65
SHA256 bc4397ac74d42b0b83877221c35e14318e1c7a9411441e3fd34d55e0ba801d10
MD5 a0ea7d0b4be176648f43af85c1501a64
SHA1 dee41252c7a6739d11adf4f7fa75ff429e69c44c
SHA512 bf11b8436fb25da7e5df8321d7f67433314747397fb60cb3d77819d3e161fe1c0ee412bf43bf57a94f1f9611f38b26198269c3c57426799d95be1b44c373d2cb
SSDEEP 98304:mAy9P+FXZCBfqHGhM2hEABO7Dy3vifU+qxDoLlr5x:mLloZLgEmZ3vi89De5x
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by voice interaction services to bind with the system. Allows apps to handle user voice interaction.	android.permission.BIND_VOICE_INTERACTION
Required by voice interaction services to bind with the system. Allows apps to handle user voice interaction.	android.permission.BIND_VOICE_INTERACTION

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

File Explorer

SKALA VPN_4.3.7 (1).apk

.apk 5.1MB

SKALA VPN_4.3.7 (1).apk

SHA256 bc4397ac74d42b0b83877221c35e14318e1c7a9411441e3fd34d55e0ba801d10
MD5 a0ea7d0b4be176648f43af85c1501a64
SHA1 dee41252c7a6739d11adf4f7fa75ff429e69c44c
SHA512 bf11b8436fb25da7e5df8321d7f67433314747397fb60cb3d77819d3e161fe1c0ee412bf43bf57a94f1f9611f38b26198269c3c57426799d95be1b44c373d2cb
SSDEEP 98304:mAy9P+FXZCBfqHGhM2hEABO7Dy3vifU+qxDoLlr5x:mLloZLgEmZ3vi89De5x
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

com.skalanetpro.pro

Android Permissions

SKALA VPN_4.3.7 (1).apk

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.skalanetpro.pro.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SKALA VPN_4.3.7 (1).apk

com.dtunnel.presenter.MainActivity

com.dtunnel.presenter.WebViewActivity

com.google.android.gms.common.api.GoogleApiActivity

com.dtunnel.presenter.services.QSTileService

com.dtunnel.presenter.services.LimiterAndroidService

com.dtunnel.presenter.services.DtFirebaseMessagingService

com.sshlib.service.DtVpnService

com.common.service.DtInteractionService

com.common.service.DtInteractionSessionService

com.hotspot.service.HotSpotService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

SKALA VPN_4.3.7 (1).apk

com.dtunnel.presenter.MainActivity

com.dtunnel.presenter.WebViewActivity

com.google.android.gms.common.api.GoogleApiActivity

com.dtunnel.presenter.services.QSTileService

com.dtunnel.presenter.services.LimiterAndroidService

com.dtunnel.presenter.services.DtFirebaseMessagingService

com.sshlib.service.DtVpnService

com.common.service.DtInteractionService

com.common.service.DtInteractionSessionService

com.hotspot.service.HotSpotService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

SKALA VPN_4.3.7 (1).apk