General

  • Target

    Cool_VPN_Pro_1.0.179_.apk

  • Size

    32.0MB

  • MD5

    45b3c3fe240298383a857946d2813c52

  • SHA1

    71a52d015b921e78b03df9ce58bd1b750abb054d

  • SHA256

    def6fd4601b7985daaffd9fb4e2fca4a1b59193ff3f0fb94d10a898413e609e0

  • SHA512

    6acec6235159ed491518199bdee82e2804085d1992d9cacad39f11493371d385e35aa960cb9007f5dbf4324ab3ad812d2c616a67cd3b780d5267ddc600d97209

  • SSDEEP

    786432:cXKP3wpxapQMSnNNll1ZCVftzOYYPMR9AygmyfcRiJt:mK4pxganFIVftaN4DyfvJt

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Cool_VPN_Pro_1.0.179_.apk
    .apk android arch:arm64 arch:arm

    cc.coolline.client.pro

    cc.coolline.client.pro.ui.agreement.AgreementActivity


Android Permissions

Cool_VPN_Pro_1.0.179_.apk

Permissions

android.permission.PACKAGE_USAGE_STATS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

cc.coolline.client.pro.SERVICE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_WIFI_STATE

cc.coolline.client.pro.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.BILLING