General

  • Target

    co.kr.dgtrading.daegilmesapp_v1.0.apk

  • Size

    31.3MB

  • MD5

    41aad629b1a3b3ec808aae107e832be5

  • SHA1

    adddf820eced963f82e16bfd949958cd58864682

  • SHA256

    cabb3fecafdce52ec064df5c843ccdaedd40377dbc71c5e3148fec97756b82c8

  • SHA512

    8b280c55fb8fcc5641d81e908665ae5867f038a09bfe390be09c59f621eee41eb8002584c8d97284b5beebc39ece00e92864b9fc986f8d26f48f796fbc4f1675

  • SSDEEP

    786432:30K4FDUE7jRe23SqqrhLLkxLBaN6Vdc3RpgIcLXOuWjSb:EFDVwyS/5kZYgVdknGwWb

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 1 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 3 IoCs

Files

  • co.kr.dgtrading.daegilmesapp_v1.0.apk
    .apk android arch:arm arch:arm64

    co.kr.dgtrading.daegilmesapp

    crc64e9dc04cce4390ee3.SplashActivity


Android Permissions

co.kr.dgtrading.daegilmesapp_v1.0.apk

Permissions

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE