General

  • Target
    ProsvetVPN-1.3.6-test.apk
  • Size 5.1MB
  • Sample260916-xdt57acf59
  • SHA256 1fcc2f7301098ac2dae1bea90ab24fca8837dd4ff2e297646e9bee648f1f237a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • ProsvetVPN-1.3.6-test.apk
    .apk 5.1MB

ProsvetVPN-1.3.6-test.apk

  • SHA256 1fcc2f7301098ac2dae1bea90ab24fca8837dd4ff2e297646e9bee648f1f237a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
fb0a8e0aedf1893f6dea8ba48ec217401754f2e70802690dcbd3bed68132cc04
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=ProsvetVPN,OU=Security,O=Prosvet,L=Network,ST=Cyber,C=RU
com.prosvet.vpn

Android Permissions

ProsvetVPN-1.3.6-test.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE