xamalicious | e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059 | Triage

Sharing

General

Target

e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059
Size

85.7MB
Sample

240419-cx6m4sec37
MD5

0fbf430746e715af26967fc101df7188
SHA1

7c3e1827e2851fd5dad011dd6f4554954144a38c
SHA256

e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059
SHA512

485a1423442c58275d10fc540cac041b8319e78a402c167181380aca71e2b83c24f7b6abbd5c69e2e8d4166308edb4a994c052ca1db0472e5a855acc3ef2cb45
SSDEEP

786432:jZXvO65pqoUOldW+d52BY06gzmc3ImVHZGV453zwXeo8ZTHMlnrAk/90EuKLm:FXW65Y+syDNuVHZ44RVrZHMRAk/90ERm

Score

10^/10

xamalicious android discovery evasion

Malware Config

Targets

- Target
  
  e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059
- Size
  
  85.7MB
- MD5
  
  0fbf430746e715af26967fc101df7188
- SHA1
  
  7c3e1827e2851fd5dad011dd6f4554954144a38c
- SHA256
  
  e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059
- SHA512
  
  485a1423442c58275d10fc540cac041b8319e78a402c167181380aca71e2b83c24f7b6abbd5c69e2e8d4166308edb4a994c052ca1db0472e5a855acc3ef2cb45
- SSDEEP
  
  786432:jZXvO65pqoUOldW+d52BY06gzmc3ImVHZGV453zwXeo8ZTHMlnrAk/90EuKLm:FXW65Y+syDNuVHZ44RVrZHMRAk/90ERm
Score

7^/10

discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion