xamalicious | com[.]ProjectPokemon[.]PKHeX[.]apk

General

Target
com.ProjectPokemon.PKHeX.apk
Size 58.1MB
Sample240428-asxtasbh94
SHA256 a4c809df927c452985ce0a92acbd857da842fc9efc328d198bf145af877e685d
MD5 cb5378656b9d7168a4ebd8cef2980277
SHA1 5003421fcef2509c24511aef01add9a85c888869
SHA512 075f4b9e34a026d01efc204600e15ea24f4b2aef3caed8d6b2222bce6b675a6e9f085e85b55b346d7d3e3eac8605a6efce1deea8a35e92e7eec2658d8f342a0d
SSDEEP 1572864:nCmirMnKKOH6hbbMqnpIa4+DkQ7bF+cYh7HLWTwS:nbnnKhahbbFnFDkQ71Yh7HA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Android Xamalicious payload 1 IoCs

resource	yara_rule
sample	family_xamalicious

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

SHA256 a4c809df927c452985ce0a92acbd857da842fc9efc328d198bf145af877e685d
MD5 cb5378656b9d7168a4ebd8cef2980277
SHA1 5003421fcef2509c24511aef01add9a85c888869
SHA512 075f4b9e34a026d01efc204600e15ea24f4b2aef3caed8d6b2222bce6b675a6e9f085e85b55b346d7d3e3eac8605a6efce1deea8a35e92e7eec2658d8f342a0d
SSDEEP 1572864:nCmirMnKKOH6hbbMqnpIa4+DkQ7bF+cYh7HLWTwS:nbnnKhahbbFnFDkQ71Yh7HA
MD5 SHA1 SHA512 SSDEEP

com.ProjectPokemon.PKHeX

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CAMERA