Managed XDR

melon-vpn-secure-proxy-vpn.apk — malware analysis report

File info

Filename
melon-vpn-secure-proxy-vpn.apk
File type
Zip archive data, at least v2.0 to extract
File size
5.2 MB
First seen
Last seen

Environment

droid7/x86 ru

Hashes

SHA1
ca6443373c9d28ff4856c35e5db09b15ecaff5cd
SHA256
f9c4c1a0585bc4ea78f5c6d453e7f596422115b9d0055a6317718b8790c2db5e
MD5
7518da9ed83893569e5ca28ddc4978d6

Signatures

Other

device_admin: Asks for device admin rights
metrics: Be used to get information from the screen
is_device_admin: Check accessibility - device admin
dynamic_load: Uses undocumented methods to load apk/dex/classes
skip_main_activity: Abort loading MainActivity
accessibility_event: Intercepting Accessibility Events
kill_process: Kills process
super_user: Checks root access
dex_elements: Modifies classes path (possibly, dynamic code loading)
reflection: Uses reflection
framework_check: Checks frida/xposed/substrate
read_or_write_global_settings: Read or write global settings
trowable: Throwable exceptions
start_activity: Starts activity
start_service: Starts service