xamalicious | 114-1[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
114-1.apk
Size 14.1MB
Sample240522-pcf8yahc5v
SHA256 cc5ba183ca686b45e37b903de57063d98c97914cddf0db2feaec70ce0d6f96b6
MD5 a3d4e51edb653cdb33883229cd432d00
SHA1 89a03c75e1269bb89df6c1e4b55a97ce69569ae5
SHA512 356f6332f2b996c9218f32891611b27dc070e16124a426d714c92104eecfcba5c009c5977e99ac5800c6316777432787d831d4643a89de6f8090c4d74d2237f6
SSDEEP 196608:U5SKj7zfdgAKQX7IBoex0BHQ7BOnhQrQM3rWwXa1Y/sec7S9i53m2/kh/Rgy:zW7T2A/7u5aBqB0kQeqSU57n5r/ksy
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xamalicious

Malware Config

Signatures

Android Xamalicious payload 1 IoCs

resource	yara_rule
sample	family_xamalicious

Xamalicious family
xamalicious

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

114-1.apk

.apk 14.1MB

114-1.apk

SHA256 cc5ba183ca686b45e37b903de57063d98c97914cddf0db2feaec70ce0d6f96b6
MD5 a3d4e51edb653cdb33883229cd432d00
SHA1 89a03c75e1269bb89df6c1e4b55a97ce69569ae5
SHA512 356f6332f2b996c9218f32891611b27dc070e16124a426d714c92104eecfcba5c009c5977e99ac5800c6316777432787d831d4643a89de6f8090c4d74d2237f6
SSDEEP 196608:U5SKj7zfdgAKQX7IBoex0BHQ7BOnhQrQM3rWwXa1Y/sec7S9i53m2/kh/Rgy:zW7T2A/7u5aBqB0kQeqSU57n5r/ksy
MD5 SHA1 SHA512 SSDEEP

android arch:arm

Android Xamalicious payload

insepet.skydroid

crc64a46eb5e3728e09cf.AlturasTanqueActivity

crc64a46eb5e3728e09cf.CambioMedioPagoVentaActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionCampeonActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionLealActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionPuntosColombiaActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionTerpelActivity

crc64a46eb5e3728e09cf.ConfigBotonesDineroActivity

crc64a46eb5e3728e09cf.ConfigModoTrabajoActivity

crc64a46eb5e3728e09cf.ConfiguracionActivity

crc64a46eb5e3728e09cf.ConsignacionActivity

crc64a46eb5e3728e09cf.CrearIdentificadorActivity

crc64a46eb5e3728e09cf.DetalleUltimaVentaActivity

crc64a46eb5e3728e09cf.DetalleVentaCanastillaActivity

crc64a46eb5e3728e09cf.DineroActivity

crc64a46eb5e3728e09cf.EnConstruccionActivity

crc64a46eb5e3728e09cf.FacturaElectronicaActivity

crc64a46eb5e3728e09cf.FakeLauncherActivity

android.intent.action.MAIN

crc64a46eb5e3728e09cf.FidelizarVentaActivity

crc64a46eb5e3728e09cf.FormaPagoVentaActivity

crc64a46eb5e3728e09cf.FormaPagoVentaCanastillaActivity

crc64a46eb5e3728e09cf.IdentificarVehiculoActivity

crc64a46eb5e3728e09cf.ImpresionConfigActivity

crc64a46eb5e3728e09cf.InfoAdicionalActivity

crc64a46eb5e3728e09cf.InfoAdicionalCreditoActivity

crc64a46eb5e3728e09cf.InfoAdicionalEfectivoActivity

crc64a46eb5e3728e09cf.InformacionFacturaActivity

crc64a46eb5e3728e09cf.KillAppActivity

crc64a46eb5e3728e09cf.LeerIbuttonActivity

crc64a46eb5e3728e09cf.FragmentActivity

crc64a46eb5e3728e09cf.LoginTestSkyActivity

crc64a46eb5e3728e09cf.MagneticCardPosZ90Activity

crc64a46eb5e3728e09cf.MagneticCardServiceActivity

crc64a46eb5e3728e09cf.MenuInventarioCombActivity

crc64a46eb5e3728e09cf.PosicionEscanearActivity

crc64a46eb5e3728e09cf.PosicionV2Activity

crc64a46eb5e3728e09cf.PrintBluetoothActivity

crc64a46eb5e3728e09cf.PrintPOSZ90Activity

crc64a46eb5e3728e09cf.PrintPOSZ90GrisActivity

crc64a46eb5e3728e09cf.PrintServiceActivity

crc64a46eb5e3728e09cf.PrintServiceFEActivity

crc64a46eb5e3728e09cf.ProductosCanastillaActivity

crc64a46eb5e3728e09cf.MainActivity

android.intent.action.MAIN

crc64a46eb5e3728e09cf.MenuCanastillaActivity

crc64a46eb5e3728e09cf.MenuHomeActivity

crc64a46eb5e3728e09cf.PosicionActivity

crc64a46eb5e3728e09cf.ProductoActivity

crc64a46eb5e3728e09cf.ProgressTestActivity

crc64a46eb5e3728e09cf.PuntoredActivity

crc64a46eb5e3728e09cf.PuntoredExitoPaqueteActivity

crc64a46eb5e3728e09cf.PuntoredFormaPagoActivity

crc64a46eb5e3728e09cf.PuntoredHistorialActivity

crc64a46eb5e3728e09cf.PuntoredPaquetesActivity

crc64a46eb5e3728e09cf.PuntoRedRecargaActivity

crc64a46eb5e3728e09cf.PuntoredExitoRecargaActivity

crc64a46eb5e3728e09cf.PuntoredVentaActivity

crc64a46eb5e3728e09cf.RfIdPosU8000Activity

crc64a46eb5e3728e09cf.RfIdPosZ90Activity

crc64a46eb5e3728e09cf.SolicitaAutorizacionActivity

crc64a46eb5e3728e09cf.SolicitaSaldoActivity

crc64a46eb5e3728e09cf.TestActivity

crc64a46eb5e3728e09cf.SurtiendoActivity

crc64a46eb5e3728e09cf.TestSkyActivity

crc64a46eb5e3728e09cf.TipoIdentificacionFidelizacionActivity

crc64a46eb5e3728e09cf.TipoVentaActivity

crc64a46eb5e3728e09cf.TurnoActivity

crc64a46eb5e3728e09cf.UltimasVentasActivity

crc64a46eb5e3728e09cf.UltimasVentasCanastillaActivity

crc64a46eb5e3728e09cf.VentaCalibracionActivity

crc64a46eb5e3728e09cf.VentaCanastillaActivity

crc64a46eb5e3728e09cf.VentaRapidaActivity

crc64a46eb5e3728e09cf.VolumenActivity

crc6480997b3ef81bf9b2.ZxingActivity

Android Permissions

114-1.apk

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.FLASHLIGHT

android.permission.CAMERA

SkyDroid.SkyService

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.BIND_DEVICE_ADMIN

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_WIFI_STATE

android.permission.REBOOT

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_LOCATION

android.permission.NFC

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH_ADMIN

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

File Explorer

114-1.apk

crc64a46eb5e3728e09cf.AlturasTanqueActivity

crc64a46eb5e3728e09cf.CambioMedioPagoVentaActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionCampeonActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionLealActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionPuntosColombiaActivity

crc64a46eb5e3728e09cf.ClienteFidelizacionTerpelActivity

crc64a46eb5e3728e09cf.ConfigBotonesDineroActivity

crc64a46eb5e3728e09cf.ConfigModoTrabajoActivity

crc64a46eb5e3728e09cf.ConfiguracionActivity

crc64a46eb5e3728e09cf.ConsignacionActivity

crc64a46eb5e3728e09cf.CrearIdentificadorActivity

crc64a46eb5e3728e09cf.DetalleUltimaVentaActivity

crc64a46eb5e3728e09cf.DetalleVentaCanastillaActivity

crc64a46eb5e3728e09cf.DineroActivity

crc64a46eb5e3728e09cf.EnConstruccionActivity

crc64a46eb5e3728e09cf.FacturaElectronicaActivity

crc64a46eb5e3728e09cf.FakeLauncherActivity

crc64a46eb5e3728e09cf.FidelizarVentaActivity

crc64a46eb5e3728e09cf.FormaPagoVentaActivity

crc64a46eb5e3728e09cf.FormaPagoVentaCanastillaActivity

crc64a46eb5e3728e09cf.IdentificarVehiculoActivity

crc64a46eb5e3728e09cf.ImpresionConfigActivity

crc64a46eb5e3728e09cf.InfoAdicionalActivity

crc64a46eb5e3728e09cf.InfoAdicionalCreditoActivity

crc64a46eb5e3728e09cf.InfoAdicionalEfectivoActivity

crc64a46eb5e3728e09cf.InformacionFacturaActivity

crc64a46eb5e3728e09cf.KillAppActivity

crc64a46eb5e3728e09cf.LeerIbuttonActivity

crc64a46eb5e3728e09cf.FragmentActivity

crc64a46eb5e3728e09cf.LoginTestSkyActivity

crc64a46eb5e3728e09cf.MagneticCardPosZ90Activity

crc64a46eb5e3728e09cf.MagneticCardServiceActivity

crc64a46eb5e3728e09cf.MenuInventarioCombActivity

crc64a46eb5e3728e09cf.PosicionEscanearActivity

crc64a46eb5e3728e09cf.PosicionV2Activity

crc64a46eb5e3728e09cf.PrintBluetoothActivity

crc64a46eb5e3728e09cf.PrintPOSZ90Activity

crc64a46eb5e3728e09cf.PrintPOSZ90GrisActivity

crc64a46eb5e3728e09cf.PrintServiceActivity

crc64a46eb5e3728e09cf.PrintServiceFEActivity

crc64a46eb5e3728e09cf.ProductosCanastillaActivity

crc64a46eb5e3728e09cf.MainActivity

crc64a46eb5e3728e09cf.MenuCanastillaActivity

crc64a46eb5e3728e09cf.MenuHomeActivity

crc64a46eb5e3728e09cf.PosicionActivity

crc64a46eb5e3728e09cf.ProductoActivity

crc64a46eb5e3728e09cf.ProgressTestActivity

crc64a46eb5e3728e09cf.PuntoredActivity

crc64a46eb5e3728e09cf.PuntoredExitoPaqueteActivity

crc64a46eb5e3728e09cf.PuntoredFormaPagoActivity

crc64a46eb5e3728e09cf.PuntoredHistorialActivity

crc64a46eb5e3728e09cf.PuntoredPaquetesActivity

crc64a46eb5e3728e09cf.PuntoRedRecargaActivity

crc64a46eb5e3728e09cf.PuntoredExitoRecargaActivity

crc64a46eb5e3728e09cf.PuntoredVentaActivity

crc64a46eb5e3728e09cf.RfIdPosU8000Activity

crc64a46eb5e3728e09cf.RfIdPosZ90Activity

crc64a46eb5e3728e09cf.SolicitaAutorizacionActivity

crc64a46eb5e3728e09cf.SolicitaSaldoActivity

crc64a46eb5e3728e09cf.TestActivity

crc64a46eb5e3728e09cf.SurtiendoActivity

crc64a46eb5e3728e09cf.TestSkyActivity

crc64a46eb5e3728e09cf.TipoIdentificacionFidelizacionActivity

crc64a46eb5e3728e09cf.TipoVentaActivity

crc64a46eb5e3728e09cf.TurnoActivity

crc64a46eb5e3728e09cf.UltimasVentasActivity

crc64a46eb5e3728e09cf.UltimasVentasCanastillaActivity

crc64a46eb5e3728e09cf.VentaCalibracionActivity

crc64a46eb5e3728e09cf.VentaCanastillaActivity

crc64a46eb5e3728e09cf.VentaRapidaActivity

crc64a46eb5e3728e09cf.VolumenActivity

crc6480997b3ef81bf9b2.ZxingActivity

crc64a46eb5e3728e09cf.KioskService

crc64a46eb5e3728e09cf.SincronizaService