26f9e19c2a82d2ed4d940c2ec535ff2aba8583ae3867502899a7790fe3628400[.]apk

Sharing

Copy URL

Twitter E-mail

General

Target

26f9e19c2a82d2ed4d940c2ec535ff2aba8583ae3867502899a7790fe3628400.apk
Size

55.7MB
MD5

52abc7f45a449ffd2760ef58672d2b71
SHA1

5daddee01e70eae61842eae36b8d69ca1f980601
SHA256

26f9e19c2a82d2ed4d940c2ec535ff2aba8583ae3867502899a7790fe3628400
SHA512

be3445d0018fc9d248cd441e6bb0000a8fc4df50f490f97acfab48fb66ed17d91565b7ab8af534f8b6936b78fd6da232f18b0c44852fd8cc42a6f3ace9e8ee98
SSDEEP

1572864:mtcGa/4E8BtUm2hF8lCHH5rQAYrSvn60SKnL53dkaZDFu:fGE6tahKYHZr3X/9D8

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

26f9e19c2a82d2ed4d940c2ec535ff2aba8583ae3867502899a7790fe3628400.apk
.apk android arch:x86 arch:arm arch:x64 arch:arm64

com.wsandroid.suite

com.android.mcafee.ui.framework.BaseActivity

Activities

com.android.mcafee.ui.framework.BaseActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.mcafee.vpn_sdk.PermissionActivity

com.mcafee.action.VPNPermissionActivity

com.moengage.integrationverifier.internal.IntegrationVerificationActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.USE_FULL_SCREEN_INTENT
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.READ_PHONE_NUMBERS
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.READ_PHONE_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.INTERNET

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.android.mcafee.ui.receiver.DeepLinkReceiver

com.mcafee.pps.deeplink.intent

com.android.mcafee.ui.receiver.PPSBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.android.mcafee.upgrade.UpgradeBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.mcafee.vsm.sdk.receiver.BootupBroadcastReceiver

android.intent.action.QUICKBOOT_POWERON
android.intent.action.BOOT_COMPLETED

com.mcafee.vsm.sdk.receiver.PackageBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.mcafee.vsm.sdk.receiver.SdcardBroadcastReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_EJECT

com.android.mcafee.receivers.LocaleBroadcastReceiver

android.intent.action.LOCALE_CHANGED

com.mcafee.android.network.NetworkChangesReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.mcafee.android.battery.BatteryChargingReceiver

android.os.action.CHARGING
android.os.action.DISCHARGING
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.mcafee.android.schedule.TimeReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.mcafee.mcanalytics.dataenrichment.observers.LocaleObserver

android.intent.action.LOCALE_CHANGED

com.mcafee.mcanalytics.dataenrichment.observers.TimezoneObserver

android.intent.action.TIMEZONE_CHANGED

com.mcafee.bp.messaging.MessagingConfigReciever

com.mcafee.bp.messaging.internal.provider.CspProvider.getPolicy

com.mcafee.csp.service.CspCommonCIDReceiver

com.mcafee.csp.clientidinfo

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.mcafee.vsm.ui.VSMService

com.mcafee.pps.vsm.action.init
com.mcafee.pps.vsm.action.stop
com.mcafee.pps.vsm.cancelscan

com.mcafee.vpn.VPNService

com.mcafee.pps.vpn.action.start
com.mcafee.pps.vpn.action.retry_last_connection
com.mcafee.pps.vpn.action.stop
com.mcafee.pps.vpn.action.register
com.mcafee.pps.vpn.action.unregister
com.mcafee.pps.vpn.action.status
com.mcafee.pps.vpn.action.kill_switch_state

com.mcafee.wifi.WifiService

com.mcafee.pps.wifi.action.start
com.mcafee.pps.wifi.action.stop
com.mcafee.pps.wifi.action.status

com.mcafee.pps.messaging.GoogleFCMMessageReceiver

com.google.firebase.MESSAGING_EVENT

com.mcafee.sb.core.SafeBrowsingService

android.net.VpnService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.tunnelbear.vpn.PolarVpnService

android.net.VpnService

Android Permissions

26f9e19c2a82d2ed4d940c2ec535ff2aba8583ae3867502899a7790fe3628400.apk

Permissions

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.USE_FULL_SCREEN_INTENT

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_NUMBERS

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.READ_PHONE_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

Sharing

General

Malware Config

Signatures

Files

com.wsandroid.suite

com.android.mcafee.ui.framework.BaseActivity

Activities

com.android.mcafee.ui.framework.BaseActivity

com.mcafee.vpn_sdk.PermissionActivity

com.moengage.integrationverifier.internal.IntegrationVerificationActivity

Permissions

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.mcafee.ui.receiver.DeepLinkReceiver

com.android.mcafee.ui.receiver.PPSBootReceiver

com.android.mcafee.upgrade.UpgradeBroadcastReceiver

com.mcafee.vsm.sdk.receiver.BootupBroadcastReceiver

com.mcafee.vsm.sdk.receiver.PackageBroadcastReceiver

com.mcafee.vsm.sdk.receiver.SdcardBroadcastReceiver

com.android.mcafee.receivers.LocaleBroadcastReceiver

com.mcafee.android.network.NetworkChangesReceiver

com.mcafee.android.battery.BatteryChargingReceiver

com.mcafee.android.schedule.TimeReceiver

com.mcafee.mcanalytics.dataenrichment.observers.LocaleObserver

com.mcafee.mcanalytics.dataenrichment.observers.TimezoneObserver

com.mcafee.bp.messaging.MessagingConfigReciever

com.mcafee.csp.service.CspCommonCIDReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.mcafee.vsm.ui.VSMService

com.mcafee.vpn.VPNService

com.mcafee.wifi.WifiService

com.mcafee.pps.messaging.GoogleFCMMessageReceiver

com.mcafee.sb.core.SafeBrowsingService

com.google.firebase.messaging.FirebaseMessagingService

com.tunnelbear.vpn.PolarVpnService

Android Permissions

26f9e19c2a82d2ed4d940c2ec535ff2aba8583ae3867502899a7790fe3628400.apk