Resubmissions

01/07/2026, 05:54

260701-gl2x1afs8p6

01/07/2026, 05:53

260701-glcm4sfs6p6

01/07/2026, 05:51

260701-gj9j3ahs4y6

General

  • Target
    projectVPN.apk
  • Size 17.8MB
  • Sample260701-glcm4sfs6p
  • SHA256 deccac1b79e31ea3105eb2e6dac5abc6c5b88226ea7c1d418650b54ab881c085
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • projectVPN.apk
    .apk 17.8MB

projectVPN.apk

  • SHA256 deccac1b79e31ea3105eb2e6dac5abc6c5b88226ea7c1d418650b54ab881c085
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
9b21cfe32df2811393a73353f17f5e848c791fab3a0a941924121d205aefccf3
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
com.airwatch.androidagent

Android Permissions

projectVPN.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BIND_VPN_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

com.airwatch.androidagent.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.READ_MEDIA_IMAGES

android.permission.BLUETOOTH

android.permission.READ_SYNC_SETTINGS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.BLUETOOTH_SCAN

com.google.android.c2dm.permission.RECEIVE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.NEARBY_WIFI_DEVICES

android.permission.READ_MEDIA_VIDEO

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_CALENDAR

com.airwatch.androidagent.QIDKSE

com.airwatch.androidagent.LE6J7X3TC82S4Y6

com.airwatch.androidagent.NV3ACB3P