xamalicious | co[.]kr[.]dgtrading[.]daegilmesapp_v1[.]0[.]apk

General

Target
co.kr.dgtrading.daegilmesapp_v1.0.apk
Size 31.3MB
Sample240619-x73pessfml
SHA256 cabb3fecafdce52ec064df5c843ccdaedd40377dbc71c5e3148fec97756b82c8
MD5 41aad629b1a3b3ec808aae107e832be5
SHA1 adddf820eced963f82e16bfd949958cd58864682
SHA512 8b280c55fb8fcc5641d81e908665ae5867f038a09bfe390be09c59f621eee41eb8002584c8d97284b5beebc39ece00e92864b9fc986f8d26f48f796fbc4f1675
SSDEEP 786432:30K4FDUE7jRe23SqqrhLLkxLBaN6Vdc3RpgIcLXOuWjSb:EFDVwyS/5kZYgVdknGwWb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Android Xamalicious payload 1 IoCs

resource	yara_rule
sample	family_xamalicious

Requests dangerous framework permissions 3 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

SHA256 cabb3fecafdce52ec064df5c843ccdaedd40377dbc71c5e3148fec97756b82c8
MD5 41aad629b1a3b3ec808aae107e832be5
SHA1 adddf820eced963f82e16bfd949958cd58864682
SHA512 8b280c55fb8fcc5641d81e908665ae5867f038a09bfe390be09c59f621eee41eb8002584c8d97284b5beebc39ece00e92864b9fc986f8d26f48f796fbc4f1675
SSDEEP 786432:30K4FDUE7jRe23SqqrhLLkxLBaN6Vdc3RpgIcLXOuWjSb:EFDVwyS/5kZYgVdknGwWb
MD5 SHA1 SHA512 SSDEEP

co.kr.dgtrading.daegilmesapp

Permissions

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE