General
-
Target
freevpn.apk
-
Size
31.2MB
-
Sample
250418-k88kva1pz2
-
MD5
31f6bd01f28ec5f75073a503d6ecfc4c
-
SHA1
e7a5aa833f406dcf7a723a8aa906b2477b5b911a
-
SHA256
48151bd27e6babe69a1ceaf94fc221aa57b0efab32cffd7c7d47d0442bf01d4b
-
SHA512
d46b0dfadfc3020ab95c722aa43296dea00a8abfc40712c40d008a68f4a69d86a474aa3e2d359008ec60518ff0ebb8f552dbe0ce47434baed37c6360dcde829d
-
SSDEEP
393216:VsTfpYWfjGveawX5+uwiH2vgKKTfZZaOCgkOtEI6ahuYNBh:yeWKzg53IUZZ2gFtQahuYBh
Behavioral task
behavioral1
Sample
freevpn.apk
Resource
android-33-x64-arm64-20240910-es
Malware Config
Targets
-
-
Target
freevpn.apk
-
Size
31.2MB
-
MD5
31f6bd01f28ec5f75073a503d6ecfc4c
-
SHA1
e7a5aa833f406dcf7a723a8aa906b2477b5b911a
-
SHA256
48151bd27e6babe69a1ceaf94fc221aa57b0efab32cffd7c7d47d0442bf01d4b
-
SHA512
d46b0dfadfc3020ab95c722aa43296dea00a8abfc40712c40d008a68f4a69d86a474aa3e2d359008ec60518ff0ebb8f552dbe0ce47434baed37c6360dcde829d
-
SSDEEP
393216:VsTfpYWfjGveawX5+uwiH2vgKKTfZZaOCgkOtEI6ahuYNBh:yeWKzg53IUZZ2gFtQahuYBh
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-