14f8c7b4b5cca8e02598309a1192d51f241ea68192c3cab5fb4ab9399d75f505[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

14f8c7b4b5cca8e02598309a1192d51f241ea68192c3cab5fb4ab9399d75f505.apk
Size

57.3MB
MD5

770878ad744fc0aa7f315576c3ac1246
SHA1

d3069d79acdb960fc79547b59cbfebb16b3892e7
SHA256

14f8c7b4b5cca8e02598309a1192d51f241ea68192c3cab5fb4ab9399d75f505
SHA512

61cbfd51ca4cb8b9724e2bc4b924f59beba6f58d249a11950d555544260ecfb8c02327c0923f2749d26c434e3bbd5edd556bff037328f1677817f6dc137dea74
SSDEEP

1572864:DtAhrhm//E8W9Py+qzh5CHo8aQAwrtvn6oVonLqQW3ka3bWBM:ih9Qy91qNEHda3aUqvWm

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

14f8c7b4b5cca8e02598309a1192d51f241ea68192c3cab5fb4ab9399d75f505.apk
.apk android arch:x86 arch:arm arch:x64 arch:arm64

com.wsandroid.suite

com.android.mcafee.ui.framework.BaseActivity

Activities

com.android.mcafee.ui.framework.BaseActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.mcafee.vpn_sdk.PermissionActivity

com.mcafee.action.VPNPermissionActivity

com.moengage.integrationverifier.internal.IntegrationVerificationActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.USE_FULL_SCREEN_INTENT
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.READ_PHONE_NUMBERS
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.READ_PHONE_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.android.mcafee.ui.receiver.DeepLinkReceiver

com.mcafee.pps.deeplink.intent

com.android.mcafee.ui.receiver.PPSBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.android.mcafee.upgrade.UpgradeBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.mcafee.vsm.sdk.receiver.BootupBroadcastReceiver

android.intent.action.QUICKBOOT_POWERON
android.intent.action.BOOT_COMPLETED

com.mcafee.vsm.sdk.receiver.PackageBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.mcafee.vsm.sdk.receiver.SdcardBroadcastReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_EJECT

com.android.mcafee.receivers.LocaleBroadcastReceiver

android.intent.action.LOCALE_CHANGED

com.mcafee.android.network.NetworkChangesReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.mcafee.android.battery.BatteryChargingReceiver

android.os.action.CHARGING
android.os.action.DISCHARGING
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.mcafee.android.schedule.TimeReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.mcafee.mcanalytics.dataenrichment.observers.LocaleObserver

android.intent.action.LOCALE_CHANGED

com.mcafee.mcanalytics.dataenrichment.observers.TimezoneObserver

android.intent.action.TIMEZONE_CHANGED

com.mcafee.bp.messaging.MessagingConfigReciever

com.mcafee.bp.messaging.internal.provider.CspProvider.getPolicy

com.mcafee.csp.service.CspCommonCIDReceiver

com.mcafee.csp.clientidinfo

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.mcafee.vsm.ui.VSMService

com.mcafee.pps.vsm.action.init
com.mcafee.pps.vsm.action.stop
com.mcafee.pps.vsm.cancelscan

com.mcafee.vpn.VPNService

com.mcafee.pps.vpn.action.start
com.mcafee.pps.vpn.action.retry_last_connection
com.mcafee.pps.vpn.action.stop
com.mcafee.pps.vpn.action.register
com.mcafee.pps.vpn.action.unregister
com.mcafee.pps.vpn.action.status
com.mcafee.pps.vpn.action.kill_switch_state

com.mcafee.wifi.WifiService

com.mcafee.pps.wifi.action.start
com.mcafee.pps.wifi.action.stop
com.mcafee.pps.wifi.action.status

com.mcafee.pps.messaging.GoogleFCMMessageReceiver

com.google.firebase.MESSAGING_EVENT

com.mcafee.sb.core.SafeBrowsingService

android.net.VpnService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.tunnelbear.vpn.PolarVpnService

android.net.VpnService

Android Permissions

14f8c7b4b5cca8e02598309a1192d51f241ea68192c3cab5fb4ab9399d75f505.apk

Permissions

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.USE_FULL_SCREEN_INTENT

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_NUMBERS

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.READ_PHONE_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

com.wsandroid.suite

com.android.mcafee.ui.framework.BaseActivity

Activities

com.android.mcafee.ui.framework.BaseActivity

com.mcafee.vpn_sdk.PermissionActivity

com.moengage.integrationverifier.internal.IntegrationVerificationActivity

Permissions

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.mcafee.ui.receiver.DeepLinkReceiver

com.android.mcafee.ui.receiver.PPSBootReceiver

com.android.mcafee.upgrade.UpgradeBroadcastReceiver

com.mcafee.vsm.sdk.receiver.BootupBroadcastReceiver

com.mcafee.vsm.sdk.receiver.PackageBroadcastReceiver

com.mcafee.vsm.sdk.receiver.SdcardBroadcastReceiver

com.android.mcafee.receivers.LocaleBroadcastReceiver

com.mcafee.android.network.NetworkChangesReceiver

com.mcafee.android.battery.BatteryChargingReceiver

com.mcafee.android.schedule.TimeReceiver

com.mcafee.mcanalytics.dataenrichment.observers.LocaleObserver

com.mcafee.mcanalytics.dataenrichment.observers.TimezoneObserver

com.mcafee.bp.messaging.MessagingConfigReciever

com.mcafee.csp.service.CspCommonCIDReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.mcafee.vsm.ui.VSMService

com.mcafee.vpn.VPNService

com.mcafee.wifi.WifiService

com.mcafee.pps.messaging.GoogleFCMMessageReceiver

com.mcafee.sb.core.SafeBrowsingService

com.google.firebase.messaging.FirebaseMessagingService

com.tunnelbear.vpn.PolarVpnService

Android Permissions

14f8c7b4b5cca8e02598309a1192d51f241ea68192c3cab5fb4ab9399d75f505.apk