xamalicious | 00a73ec14da4b3b9024cba47edf24c6ac168427baec95d3367bf4a9d08090ad7 | Triage

Sharing

General

Target

UMPSA ADAB_3.2.0_apkcombo.com.apk
Size

79.6MB
Sample

240602-p63c9sch5z
MD5

8dde3cd9e2f57024c9fd09e94cc352d2
SHA1

8ca24e13fe957b087c57d0e719e959398c0038d9
SHA256

00a73ec14da4b3b9024cba47edf24c6ac168427baec95d3367bf4a9d08090ad7
SHA512

6a99e89fa364ecbb258249062e50b657d942d77abc47743d1ed8ea236d71689439347283580955e8733cbbece167a6d7fc568e843331ea80fe46be43b273dd0e
SSDEEP

1572864:fXDpWss8xYjf34pjZ9V2r3em+XzNsOC4zhvrhu:7ZxYz34pjZA+XzTRVI

Score

10^/10

xamalicious android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  UMPSA ADAB_3.2.0_apkcombo.com.apk
- Size
  
  79.6MB
- MD5
  
  8dde3cd9e2f57024c9fd09e94cc352d2
- SHA1
  
  8ca24e13fe957b087c57d0e719e959398c0038d9
- SHA256
  
  00a73ec14da4b3b9024cba47edf24c6ac168427baec95d3367bf4a9d08090ad7
- SHA512
  
  6a99e89fa364ecbb258249062e50b657d942d77abc47743d1ed8ea236d71689439347283580955e8733cbbece167a6d7fc568e843331ea80fe46be43b273dd0e
- SSDEEP
  
  1572864:fXDpWss8xYjf34pjZ9V2r3em+XzNsOC4zhvrhu:7ZxYz34pjZA+XzTRVI
Score

7^/10

discovery evasion impact persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence