website-fgmalatest.zip
- SHA256 92d5f4f0f9dedb9cc4c61186edd1b77c16830a9dbb3e0a3aa1dbaf67376f729f
Static task
static1
3 signatures
General
- Target website-fgmalatest.zip
- Size 4.2MB
- Sample260928-pshrpsvyfv
- SHA256 92d5f4f0f9dedb9cc4c61186edd1b77c16830a9dbb3e0a3aa1dbaf67376f729f
- MD5 e143251f38b452bb46cc9796a13a4f20
- SHA1 218f0dfac57915a4adea7e3dbf75f7828dea01c8
- SHA512 bdbf473d61bbff768a3bc44820da40892b312bb51ea5bed690a30887ae6d7bb2c2656dda85b196cfc43e0ed860a5f62e7fb5a0542795d6844d527a8eaadfb48a
- SSDEEP 98304:GUmqXF8wWtRLYRCGpuulwmjtnYKxQGZu4o4elKXRVAJxXGKmLlLv:JHF8FKfjxnYQxw4o46KhVUmpv
- TLSH T1C81633A48005A6F0BE4CA84C4812C8BD51D211F49FC91B138BB55F175CDEBC5AF6EF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE - Requests dangerous framework permissions 4 IoCs
description ioc Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/website-fgmalatest/fgvpn17.apk
File Explorer
-
website-fgmalatest.zip.zip 4.2MB
-
website-fgmalatest/fgvpn17.apk.apk 4.8MB
website-fgmalatest/fgvpn17.apk
- SHA256 fc56ee25a8babfc19b1cec1f309f93c329e36ef94e2bb322ad8c1c35c11a0cd1
- MD5 23894fcd3f1c01b7bdf4452988d19b11
- SHA1 9cf2798c8d84dcbced360507789f731814e8722c
- SHA512 b9767bf04aa3a19aec1e669a996f971387bdf1d3a4c8b1d0f0b5b1f3afe129aa59dd66f59f5666ea6a2e804beec90983192848423cf3a591f3292f60f3953d9d
- SSDEEP 98304:JQlN3tQyKiZnXmsEheIjRQAPiAUFMGATKG6naklcex9oI:JQr3tQwohn9KFMGCKGX+x9oI
- TLSH T1DA360197FB49ED6AC8F383374A354A76A1064C698B43D743099C363D29B3AD05EC5EC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
8aebff3e0610cdb5d1775dc09f16ee1036e83f047e20c324b01d1752ac9df93a
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=FREEGATE ANDROID,OU=RD,O=DIT,L=SEATTLE,ST=WA,C=US
Subject
CN=FREEGATE ANDROID,OU=RD,O=DIT,L=SEATTLE,ST=WA,C=US
Serial Number
48:5b:0b:7a:d1:b0:8c:02
Issuer
CN=FREEGATE ANDROID,OU=RD,O=DIT,L=SEATTLE,ST=WA,C=US
Timespan
Jan 12, 2026 - May 30, 2053
com.xndapsfz.eigxry
com.dit.fgv.StartActivity
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.ACCESS_NETWORK_STATE
com.dit.fgv.StartActivity
android.intent.action.MAIN
com.dit.fgv.LaunchPad
android.intent.action.MAIN
com.dit.fgv.TabActivity
com.dit.fgv.VPNListActivity
com.dit.fgv.HelpActivity
com.dit.fgv.ExitActivity
com.dit.fgv.CardActivity
com.dit.fgv.PlayerActivity
com.dit.fgv.OptionsActivity
com.dit.fgv.service.ProxyService
com.dit.fgv.service.FgVpnService
android.net.VpnService
com.dit.fgv.UpdateService
com.dit.fgv.service.DownloadService
com.dit.fgv.service.SyncService
androidx.room.MultiInstanceInvalidationService
com.dit.fgv.NotifyClickReceiver
notification_clicked