e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk
Size 28.3MB
Sample261020-snretsbt4x
SHA256 82bf3b9ce7dcc73e74ce638240a42a2f1a395570161194340bd86cc79179cdab
MD5 b8078650b7870d035e85109d70cc5afc
SHA1 2ee25a6c2ebe0651849ea2acb0e6bae4a6e557e2
SHA512 63e5055652b90bef7c6f4a2f277b8fa6a13c33decccf03deb4dfb2a91fcd44a11659ed12e03d7b9708e7ae2e872a34956042f2199d93e294ba6df18548561b25
SSDEEP 786432:EPSvhHQ4gZttU6ESjaykB8S+4OMzmMv2eK6mGazqhhKxEyU:EPS4tu6ES+yO8S+fMzmMvHkqhp
TLSH
T13A5723A7F36DA91FC8739032CA6A2273949D4F118A42E7572504B35D68F3AD08F69FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk

File Explorer

e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk

.apk 28.3MB

e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk

SHA256 82bf3b9ce7dcc73e74ce638240a42a2f1a395570161194340bd86cc79179cdab
MD5 b8078650b7870d035e85109d70cc5afc
SHA1 2ee25a6c2ebe0651849ea2acb0e6bae4a6e557e2
SHA512 63e5055652b90bef7c6f4a2f277b8fa6a13c33decccf03deb4dfb2a91fcd44a11659ed12e03d7b9708e7ae2e872a34956042f2199d93e294ba6df18548561b25
SSDEEP 786432:EPSvhHQ4gZttU6ESjaykB8S+4OMzmMv2eK6mGazqhhKxEyU:EPS4tu6ES+yO8S+fMzmMvHkqhp
TLSH
T13A5723A7F36DA91FC8739032CA6A2273949D4F118A42E7572504B35D68F3AD08F69FC4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1aea0c4a3ec42b646bc8a3e7bf2d22a2c615c9d0dcac27226bfcb593581f14dd03fd78bc308d3f97d09732c055c5360f59000363c6bf349aaf4b257a6d9a8fe4

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.hunter.net

com.hunter.net.LauncherActivity

android.intent.action.MAIN

com.hunter.net.RevHunterMainActivity

com.hunter.net.activities.ConfigGeralActivity

com.hunter.net.activities.WebViewActivity

me.dawson.proxyserver.ui.ProxySettings

com.hunter.net.activities.ConfigImportFileActivity

android.intent.action.VIEW

com.hunter.net.activities.ConfigExportFileActivity

com.hunter.net.activities.AboutActivity

com.kiritoprojects.ultrasshservice.LaunchVpn

android.intent.action.MAIN

com.kiritoprojects.ultrasshservice.util.DummyActivity

com.kiritoprojects.compatstyle.NotImplemented

com.yandex.mobile.ads.common.AdActivity

com.criteo.publisher.CriteoInterstitialActivity

com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.amazon.device.ads.DTBInterstitialActivity

com.amazon.device.ads.DTBAdActivity

com.google.android.gms.ads.AdActivity

com.adcolony.sdk.AdColonyInterstitialActivity

com.adcolony.sdk.AdColonyAdViewActivity

com.my.target.common.MyTargetActivity

com.google.android.gms.common.api.GoogleApiActivity

com.facebook.ads.AudienceNetworkActivity

com.appodeal.ads.VideoPlayerActivity

com.appodeal.ads.TestActivity

com.appodeal.consent.view.ConsentActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.vungle.warren.ui.VungleActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.adapter.PangleAdInterstitialActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

io.bidmachine.nativead.view.VideoPlayerActivity

com.explorestack.iab.mraid.MraidActivity

com.explorestack.iab.vast.activity.VastActivity

com.hunter.net.Firebase.FirebaseService

com.google.firebase.MESSAGING_EVENT

me.dawson.proxyserver.ui.ProxyService

com.kiritoprojects.ultrasshservice.tunnel.vpn.TunnelVpnService

android.net.VpnService

com.kiritoprojects.ultrasshservice.RevHunterService

com.kiritoprojects.ultrasshservice.NetSpeedNotification

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.play.core.assetpacks.AssetPackExtractionService

com.google.android.play.core.assetpacks.ExtractionForegroundService

com.google.android.gms.ads.AdService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

com.yandex.metrica.ConfigurationJobService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.applovin.impl.sdk.utils.AppKilledService

com.applovin.impl.adview.activity.FullscreenAdService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.room.MultiInstanceInvalidationService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.hunter.net.SharedReceiver

com.hunter.net.SharedReceiver.ACTION_HOSTSHARED_SERVICE_STOP

com.kiritoprojects.ultrasshservice.MainReceiver

.MainReceiver.ACTION_SERVICE_STOP .MainReceiver.ACTION_SERVICE_RESTART

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.android.gms.measurement.AppMeasurementReceiver

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.appodeal.ads.AppodealPackageAddedReceiver

android.intent.action.PACKAGE_ADDED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.CLEAR_APP_CACHE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.POWER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE