crc641bb1a4ed22826086.MainActivity
android.intent.action.MAIN
General
-
Target
MelonLoaderInstaller_PermissionBypass.apk
-
Size
97.2MB
-
MD5
24e8bbdac7bd93d36a2cca7858bbfbe8
-
SHA1
0ced5b84ba918022221d481702b2f7c3820f6f5a
-
SHA256
5e1dc556f74348bd2b6c318901f31685bfcb53ed6a6ade7ecfe79701678ca019
-
SHA512
ddd23bdfe73e58aa32fd5e1ca63bae1ddc26f1bc0c24f1e3ee2b4e138cf89a3c3ea09da929a2ebacafcf0bfac319b68d6634475c015a7186e023ea310fa4a74e
-
SSDEEP
786432:qq94zuYWxxzJG6y4zdVX1e3IFeWC4UO/IkXwewas2+MmgRV:qaYWv/yMs3IJLUO/Ikgeg2+W
Score
10/10
Malware Config
Signatures
-
Android Xamalicious payload 1 IoCs
resource yara_rule sample family_xamalicious -
Xamalicious family
-
Requests dangerous framework permissions 5 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to access any geographic locations persisted in the user's shared collection. android.permission.ACCESS_MEDIA_LOCATION
Files
-
MelonLoaderInstaller_PermissionBypass.apk.apk android arch:arm arch:arm64
com.melonloader.installer
crc641bb1a4ed22826086.MainActivity
Activities
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_MEDIA_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
moe.shizuku.manager.permission.API_V23
com.melonloader.installer.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Receivers
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
Services
Android Permissions
MelonLoaderInstaller_PermissionBypass.apk
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_MEDIA_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
moe.shizuku.manager.permission.API_V23
com.melonloader.installer.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION