xamalicious | 8f90094ef7ace1ef34a3b300393bb068daf2cc8bd8b4efd9a075d2a10b6ccd9f | Triage

Sharing

General

Target

8f90094ef7ace1ef34a3b300393bb068daf2cc8bd8b4efd9a075d2a10b6ccd9f
Size

24.6MB
Sample

240806-jfn53atblq
MD5

84a0c4cf86aa96770d248a5fb4c24a6e
SHA1

84457e946831ecf1672aa389ec88b2be57af0297
SHA256

8f90094ef7ace1ef34a3b300393bb068daf2cc8bd8b4efd9a075d2a10b6ccd9f
SHA512

9a93064d6d600a32f6b94e6667a2d3b1b520595c0147d1d933f4cc9678bdaab8a13a4068af226155c5805c76b9f57f81f544803cc48cdb15f0c846725a849735
SSDEEP

393216:xBXczm1mIV8s7ERjtJO4jzncjj6L28BCDtMyuwJKeSzHmB0vO6UzmzR:xBMzomI17ERjXLXaB87wJKekmqDUzI

Score

10^/10

xamalicious android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  8f90094ef7ace1ef34a3b300393bb068daf2cc8bd8b4efd9a075d2a10b6ccd9f
- Size
  
  24.6MB
- MD5
  
  84a0c4cf86aa96770d248a5fb4c24a6e
- SHA1
  
  84457e946831ecf1672aa389ec88b2be57af0297
- SHA256
  
  8f90094ef7ace1ef34a3b300393bb068daf2cc8bd8b4efd9a075d2a10b6ccd9f
- SHA512
  
  9a93064d6d600a32f6b94e6667a2d3b1b520595c0147d1d933f4cc9678bdaab8a13a4068af226155c5805c76b9f57f81f544803cc48cdb15f0c846725a849735
- SSDEEP
  
  393216:xBXczm1mIV8s7ERjtJO4jzncjj6L28BCDtMyuwJKeSzHmB0vO6UzmzR:xBMzomI17ERjXLXaB87wJKekmqDUzI
Score

7^/10

discovery impact persistence collection credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryimpactpersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence