GosuVPN-v2[.]4[.]1 (4)[.]apk

General

Target
GosuVPN-v2.4.1 (4).apk
Size 8.9MB
Sample260925-hlnk2sbf28
SHA256 2e0008ef0fbaa17c439d19552456ff56712623cda0212b20c36e99ad785fad54
MD5 2b8f96a64be1cd8d1b6cbec22f89f5ed
SHA1 af6828b60f134e59816b48e1e43a767bd7a054bd
SHA512 43ee74edab66109885e7d0e42e6efee897eded1836b551342ed6135296b1f9fc55c4923f04b36da95453b34590a067076751301da6746c8e4594f8bdfa46b446
SSDEEP 196608:NvAq3tlZn5JXunFZdMhq+ywHThPJEqQ9YbXT3KkYGJWZQ8rjsrmHpao/TVMI:ND3tjenFPMUinE3cT3K7yWeEjZz/TVd
TLSH
T1F3961265DB0C2826F8393AF5C5D20E9733AC4B104712D96F6AFC746039C7BE29B52879
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
GosuVPN-v2.4.1 (4).apk

File Explorer

GosuVPN-v2.4.1 (4).apk

.apk 8.9MB

GosuVPN-v2.4.1 (4).apk

SHA256 2e0008ef0fbaa17c439d19552456ff56712623cda0212b20c36e99ad785fad54
MD5 2b8f96a64be1cd8d1b6cbec22f89f5ed
SHA1 af6828b60f134e59816b48e1e43a767bd7a054bd
SHA512 43ee74edab66109885e7d0e42e6efee897eded1836b551342ed6135296b1f9fc55c4923f04b36da95453b34590a067076751301da6746c8e4594f8bdfa46b446
SSDEEP 196608:NvAq3tlZn5JXunFZdMhq+ywHThPJEqQ9YbXT3KkYGJWZQ8rjsrmHpao/TVMI:ND3tjenFPMUinE3cT3K7yWeEjZz/TVd
TLSH
T1F3961265DB0C2826F8393AF5C5D20E9733AC4B104712D96F6AFC746039C7BE29B52879
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c5eb7190c1cf20b6c68ba5e3a96b6a1b8c889fa2760a27e9c3bda79db7b59cd9

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.ijukbt.vsuqlicsk

Android Permissions

GosuVPN-v2.4.1 (4).apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.USE_EXACT_ALARM

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

com.ijukbt.vsuqlicsk.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

GosuVPN-v2.4.1 (4).apk

File Signature issue

bewl.khuj.Sparrow

bewl.khuj.Falcon

bewl.khuj.Crane

bewl.khuj.Ibis

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

GosuVPN-v2.4.1 (4).apk

File Signature issue

bewl.khuj.Sparrow

bewl.khuj.Falcon

bewl.khuj.Crane

bewl.khuj.Ibis

Android Permissions

GosuVPN-v2.4.1 (4).apk