Resubmissions

05-09-2024 08:47

240905-kp68nswgmq 6

05-09-2024 08:46

240905-kpf2gsxfjh 6

05-09-2024 08:44

240905-knn1pswglk 6

05-09-2024 08:33

240905-kf5ngsxdrh 6

General

  • Target

    SetupVPN-android.apk

  • Size

    39.0MB

  • MD5

    cde59c26457d8d21284868070396ef1a

  • SHA1

    c7049341486e60c0ba12b63c063dc0668df44f56

  • SHA256

    0adb5780912bfd045f34a120dcc8deaf8bd0926f9f85bfe4f35ce59585ed0faf

  • SHA512

    630e9a284250154cca42c1c779c8f8d622642edb292f3b0df4b4438f7b446b357f8850d06ff470e2faff297f127f847d5b31a09bd51aa4046c961e9aaa8762fe

  • SSDEEP

    786432:D52HWwD4B/X1tKQIEZuuq+YdS83N2unH0VEBM5bjO7unWPiyYxpEdOo8T+B:D52HWrRXMKuvEuAEB4b67Eymwh8T+B

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • SetupVPN-android.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.setupvpn.main

    com.setupvpn.main.MainActivity


Android Permissions

SetupVPN-android.apk

Permissions

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

com.setupvpn.main.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION