com[.]hunter[.]net_47[.]xapk

Sharing

Copy URL Twitter E-mail

General

Target
com.hunter.net_47.xapk
Size 160.5MB
Sample261020-sbm7msa18w
SHA256 60bfa1875954c40a4dd4f18e63550f7b6079a431b291cdc700b5009527998a56
MD5 0d8920227b0d50d9adb251ada6b1f0ab
SHA1 cfe9af2c1aeee5215d22a739c82f5cf40b78282c
SHA512 bdb0256f56f6b04adcc4ae1614849b819ef99069d763ae51cee55859ee50d76139adcea5dd487072b816a59ec9f89c24892aa45f8d4f71089859ecd0874617c1
SSDEEP 786432:cJGNNNkCnCmKRE6NrExF6tJSXBw8p3lkn+ZSxFOHuQqOO0v65jZfHoEPwy/5iqw9:G4CW/XsQO0v65jZfH/foME/V7R8C5
TLSH
T19C885B7672C54C20D6AD61B4E8FA8610FBF95ECAC5C3BB431801B3756D361E1BA90AC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Codesign digest Mismatch 2 IoCs

File was altered after it was signed.

resource
unpack001/config.en.apk
unpack001/config.xxhdpi.apk

Insecure Codesign Algorithm 3 IoCs

File was codesigned using an insecure algorithm.

resource
unpack001/config.arm64_v8a.apk
unpack001/config.en.apk
unpack001/config.xxhdpi.apk

Untrusted Codesign Signers 3 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/config.arm64_v8a.apk
unpack001/config.en.apk
unpack001/config.xxhdpi.apk

File Explorer

com.hunter.net_47.xapk

.zip 160.5MB
com.hunter.net.apk

.apk 147.5MB
config.arm64_v8a.apk

.jar 12.5MB
config.en.apk

.jar 180KB
config.xxhdpi.apk

.jar 318KB
manifest.json

1KB

com.hunter.net_47.xapk

SHA256 60bfa1875954c40a4dd4f18e63550f7b6079a431b291cdc700b5009527998a56
MD5 0d8920227b0d50d9adb251ada6b1f0ab
SHA1 cfe9af2c1aeee5215d22a739c82f5cf40b78282c
SHA512 bdb0256f56f6b04adcc4ae1614849b819ef99069d763ae51cee55859ee50d76139adcea5dd487072b816a59ec9f89c24892aa45f8d4f71089859ecd0874617c1
SSDEEP 786432:cJGNNNkCnCmKRE6NrExF6tJSXBw8p3lkn+ZSxFOHuQqOO0v65jZfHoEPwy/5iqw9:G4CW/XsQO0v65jZfH/foME/V7R8C5
TLSH
T19C885B7672C54C20D6AD61B4E8FA8610FBF95ECAC5C3BB431801B3756D361E1BA90AC7
MD5 SHA1 SHA512 SSDEEP TLSH

com.hunter.net.apk

SHA256 167b13350ec5b5efedf04810e90bf708438bdbd4e5b5866a771ed976ef12c1e6
MD5 902a7ba5a6cdf1754c05d2a4ca7869e0
SHA1 d37f6fb56c34c93f02af1dbf76ab1cb416871058
SHA512 dfe96b59ca0840c64501a59f77865cdd3dbb30b29d323d7d7e092e336564d5e356d6bd5a21a69948749bcbf541c8add0f67c01a44214043b3dfb6d05c0bb830d
SSDEEP 786432:mJGNNNkCnCmKRE6NrExF6tJSXBw8p3lkn+ZSxFOHuQqOO0v65jZfHoEPwy/5iqy:g4CW/XsQO0v65jZfH/f6
TLSH
T100783A7672C54C20D6AD61B4E8FA8610FBF95ECAC5C3BB431801B3756D361E1BA90AC7
MD5 SHA1 SHA512 SSDEEP TLSH

android

File Signature issue

Digest

7f30221e72e1e9c562acf65202c5ca4655b498000f12e5544bb8434cf46ab3f845cd758bd5e8608fab1ca1484c29174a554f4d0290d06e77937a48aadd960f32

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.hunter.net

com.hunter.net.LauncherActivity

android.intent.action.MAIN

com.hunter.net.util.MyIP_Address

com.hunter.net.HostChecker

com.hunter.net.activities.GoogleSignInActivity

com.hunter.net.RevHunterMainActivity

com.hunter.net.activities.ConfigGeralActivity

com.hunter.net.activities.WebViewActivity

me.dawson.proxyserver.ui.ProxySettings

com.hunter.net.activities.PrivacyActivity

com.hunter.net.activities.StatusServerActivity

com.hunter.net.activities.ConfigImportFileActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.hunter.net.activities.AboutActivity

com.hunter.net.ExceptionActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.templates.renderer.fullscreen.FullscreenWebviewActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.vast.VastActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.staticrenderer.StaticAdActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.mraid.MraidActivity

com.pubmatic.sdk.webrendering.mraid.POBVideoPlayerActivity

com.pubmatic.sdk.webrendering.ui.POBFullScreenActivity

com.pubmatic.sdk.common.browser.POBInternalBrowserActivity

com.kiritoprojects.ultrasshservice.LaunchVpn

android.intent.action.MAIN

com.kiritoprojects.ultrasshservice.util.DummyActivity

com.chartboost.sdk.view.CBImpressionActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.chartboost.sdk.view.FullscreenAdActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.yandex.mobile.ads.common.AdActivity

com.yandex.mobile.ads.features.debugpanel.ui.IntegrationInspectorActivity

com.taurusx.tax.ui.TaxWebViewActivity

com.taurusx.tax.ui.TaxVideoActivity

com.taurusx.tax.ui.AppOpenAdActivity

com.taurusx.tax.ui.AppOpenNativeAdActivity

com.taurusx.tax.utils.webview.TaxBrowserActivity

com.taurusx.tax.mraid.MraidBrowser

com.taurusx.tax.mraid.MraidVideoPlayerActivity

com.taurusx.tax.ui.TaurusxH5Activity

com.vungle.ads.internal.ui.VungleActivity

com.inmobi.ads.rendering.InMobiAdActivity

com.inmobi.ads.rendering.InMobiInAppBrowserActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

io.bidmachine.rendering.ad.fullscreen.FullScreenActivity

com.appodeal.ads.adapters.iab.unified.VideoPlayerActivity

com.appodeal.ads.TestActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.google.android.gms.ads.NotificationHandlerActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.my.target.common.MyTargetActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.kiritoprojects.compatstyle.NotImplemented

com.mobilefuse.sdk.MobileFuseFullscreenActivity

com.mobilefuse.sdk.MobileFuseFullscreenTransparentActivity

com.mobilefuse.sdk.experimental.NativeInterstitialActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.adview.AppLovinFullscreenImmersiveActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity

com.applovin.mediation.MaxDebuggerAxonEventsListActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.startapp.sdk.adsbase.consent.ConsentActivity

com.startapp.sdk.ads.list3d.List3DActivity

com.startapp.sdk.ads.interstitials.OverlayActivity

com.google.android.gms.common.api.GoogleApiActivity

com.facebook.ads.AudienceNetworkActivity

com.bytedance.sdk.openadsdk.activity.single.TTCeilingLandingPageActivity

com.bytedance.sdk.openadsdk.activity.single.IABLandingPageActivity

com.bytedance.sdk.openadsdk.activity.single.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.single.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.single.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.single.TTHistoryLandingPageActivity

com.bytedance.sdk.openadsdk.activity.single.TTHistoryActivity

com.bytedance.sdk.openadsdk.activity.single.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.single.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.single.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.single.TTAppOpenAdTransActivity

com.bytedance.sdk.openadsdk.activity.single.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardWebActivity

com.bytedance.sdk.openadsdk.activity.TTFullWebActivity

com.bytedance.sdk.openadsdk.activity.single.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.single.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.single.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.single.TTAdActivity

io.bidmachine.nativead.view.VideoPlayerActivity

io.bidmachine.rendering.ad.view.ExpandActivity

io.bidmachine.iab.mraid.MraidActivity

io.bidmachine.iab.vast.activity.VastActivity

com.smaato.sdk.rewarded.view.RewardedInterstitialAdActivity

com.smaato.sdk.interstitial.view.InterstitialAdActivity

com.smaato.sdk.core.browser.SmaatoSdkBrowserActivity

com.mobilefuse.sdk.ad.rendering.splashad.MobileFuseSplashAdActivity

net.pubnative.lite.sdk.consent.UserConsentActivity

net.pubnative.lite.sdk.interstitial.activity.MraidInterstitialActivity

net.pubnative.lite.sdk.interstitial.activity.VastInterstitialActivity

net.pubnative.lite.sdk.rewarded.activity.MraidRewardedActivity

net.pubnative.lite.sdk.rewarded.activity.VastRewardedActivity

net.pubnative.lite.sdk.contentinfo.AdFeedbackActivity

net.pubnative.lite.sdk.utils.browser.BrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.unity3d.ironsourceads.internal.services.InlineStoreActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

com.mbridge.msdk.config.activity.MBRewardVideoActivity

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.PopupAdActivity

sg.bigo.ads.api.LandingStyleableActivity

sg.bigo.ads.api.LandscapeAdActivity

sg.bigo.ads.api.CompanionAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.zmaticoo.sdk.flow.components.AdActivity

com.zmaticoo.sdk.base.common.MaticooInnerActivity

com.explorestack.iab.mraid.MraidActivity

com.explorestack.iab.mraid.MraidDialogActivity

com.explorestack.iab.vast.activity.VastActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.ogury.ad.interstitial.ui.InterstitialActivity

com.ogury.ad.interstitial.ui.InterstitialAndroid8TransparentActivity

com.ogury.ad.interstitial.ui.InterstitialAndroid8RotableActivity

com.hunter.net.Firebase.FirebaseService

com.google.firebase.MESSAGING_EVENT

me.dawson.proxyserver.ui.ProxyService

com.hunter.net.checkproxy.V2RayCheckService

com.kiritoprojects.ultrasshservice.tunnel.vpn.TunnelVpnService

android.net.VpnService

com.kiritoprojects.ultrasshservice.RevHunterService

com.kiritoprojects.ultrasshservice.NetSpeedNotification

dev.kiritoprojects.lib.v2ray.services.V2rayVPNService

android.net.VpnService

com.chartboost.sdk.internal.video.repository.exoplayer.VideoRepositoryDownloadService

com.google.android.exoplayer.downloadService.action.RESTART

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.gms.ads.AdService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.applovin.impl.adview.activity.FullscreenAdService

com.applovin.impl.adview.activity.AppRestartDuringAdDetectionService

io.appmetrica.analytics.internal.AppMetricaService

io.appmetrica.analytics.IAppMetricaService

com.startapp.sdk.cachedservice.BackgroundService

com.startapp.sdk.jobs.SchedulerService

androidx.room.MultiInstanceInvalidationService

config.arm64_v8a.apk

SHA256 65972fcd020e14ec2e719ae9af9872973595d144bd785b8750f63d15de7f5932
MD5 0193d415557dac65de262c6b542e603d
SHA1 d305eae2d51b7b0bf8743b8c038515719075c403
SHA512 2f08741611739bbc441083716338db0fa79475c2788355588b6d90a5d41530effd3f9bd54e546df55610105c7170bdf930d1a0a923627e51f23782e85c306ef2
SSDEEP 393216:Dc/a3ut+luUR2UtO4eC8GifVguLVKLogB7MUGQBX0shgqz/:oCuAlVvbeC8V7LVKEoL22j
TLSH
T13BD633DEBB74B0C9FAB2723004A4D3D0F55A5606CA7D0AFB842DA34735C9AA14F61D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1ca38506c8f122e56901c1aa2686a03dcb886d84

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

Chains

Jan 1, 0001

config.en.apk

SHA256 fb46cfe8249646f27b970c7055c56f8dc28edd774a9f07b9bcaac8b8c075889c
MD5 7609eb0006508eba56a55554b4d62e17
SHA1 741e2666a0b31294532e5eb29ba42381c135256c
SHA512 69a813aba9701479e4881dab14deba997e623169e54c746b11313edbab307e938ec50398e20861d327df3a04468cc1e7f2e475d7543b60f507f5ab74e86cdfb5
SSDEEP 1536:4UDDFI0cunv/e84vyyJMM5DokIOnushie8iGf7c57aeIVObeObeO6:73O/KCEkBn6ePGf7c571np6
TLSH
T14A04C106A7427A2FC83784391D4AD2991121BE07DB438B17E470723C25BF7E19FAA2F5
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6949bfb4ba9b430c03e951bcc477e6784ac98c1f

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

Chains

Jan 1, 0001

config.xxhdpi.apk

SHA256 ed63a70594b11568c494a271f9a1c6cabe907c1305d1e8a6e928d535932d3808
MD5 4ac4620867d5bffaec190dfeb96680ab
SHA1 f46b8eb06fcf910c566c82ce220a9b7583fb721e
SHA512 1071e26bf645ea4ce28da4c07858f11df5d3f018bf9f15499455adb69f0d30f2c9e72765afa3a8e71edf8b5dd4582416c1ba7311582175a832fccac18a916e6c
SSDEEP 6144:KjkoqiBODF5aSSJ0c/FOIrmPRT7h2w2yW2u:QgDK0c/Frrm97z2yW2u
TLSH
T18E64BEF2D33EBC0AD833C53987791697A5944C90A965E7626A06F21C9FF3E81DA04FC1
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

30a33b08cdb79a6c04cbaeb921e2b240ffe84c33

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

Chains

Jan 1, 0001