xamalicious | com[.]ProjectPokemon[.]PKHeX[.]apk

General

Target

com.ProjectPokemon.PKHeX.apk
Size

58.1MB
MD5

cb5378656b9d7168a4ebd8cef2980277
SHA1

5003421fcef2509c24511aef01add9a85c888869
SHA256

a4c809df927c452985ce0a92acbd857da842fc9efc328d198bf145af877e685d
SHA512

075f4b9e34a026d01efc204600e15ea24f4b2aef3caed8d6b2222bce6b675a6e9f085e85b55b346d7d3e3eac8605a6efce1deea8a35e92e7eec2658d8f342a0d
SSDEEP

1572864:nCmirMnKKOH6hbbMqnpIa4+DkQ7bF+cYh7HLWTwS:nbnnKhahbbFnFDkQ71Yh7HA

Score

10^/10

xamalicious

Android Xamalicious payload 1 IoCs

Processes:

resource	yara_rule
sample	family_xamalicious

Requests dangerous framework permissions 4 IoCs

Processes:

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CAMERA