xamalicious | bbd2981822b7842ec382deec344a309440d1d97901af3e5ca3f5a07a98ecc2e3 | Triage

Sharing

General

Target

%D9%85%D9%86%D8%B5%D8%A9%20%D8%A3%D8%A8%D9%88%D8%A7%D8%A8%20%D8%A7%D9%84%D8%B0%D9%87%D8%A8%20-%D9%83%D8%B1%D8%AA%D9%88%D9%86%20%D9%88%D8%A8%D8%B1%D8%A7%D9%85%D8%AC_3.8.1_apkcombo.com.apk
Size

48.0MB
Sample

241104-s8v9hssdld
MD5

348bcbd10a26c136ded0159ca4d079d6
SHA1

f28b53deec751e615fe8f8393f0e1adfd8b41cfd
SHA256

bbd2981822b7842ec382deec344a309440d1d97901af3e5ca3f5a07a98ecc2e3
SHA512

b292b8173cad3805b61e1dcc7e8ca3b3dd6f419ba221175fe6021fac30f304e549b05e1377070e4245bb0d6672e221c7ce771c7968eb6a33641d12321c319379
SSDEEP

786432:uPIJe5JC2gbzvABg5uXoL86Qse8MwEplmY3KuWiwUbXyWrGMsJewO:05JVNBlXoY971plmY3VuUZ2ewO

Score

10^/10

xamalicious android evasion persistence

Malware Config

Targets

- Target
  
  %D9%85%D9%86%D8%B5%D8%A9%20%D8%A3%D8%A8%D9%88%D8%A7%D8%A8%20%D8%A7%D9%84%D8%B0%D9%87%D8%A8%20-%D9%83%D8%B1%D8%AA%D9%88%D9%86%20%D9%88%D8%A8%D8%B1%D8%A7%D9%85%D8%AC_3.8.1_apkcombo.com.apk
- Size
  
  48.0MB
- MD5
  
  348bcbd10a26c136ded0159ca4d079d6
- SHA1
  
  f28b53deec751e615fe8f8393f0e1adfd8b41cfd
- SHA256
  
  bbd2981822b7842ec382deec344a309440d1d97901af3e5ca3f5a07a98ecc2e3
- SHA512
  
  b292b8173cad3805b61e1dcc7e8ca3b3dd6f419ba221175fe6021fac30f304e549b05e1377070e4245bb0d6672e221c7ce771c7968eb6a33641d12321c319379
- SSDEEP
  
  786432:uPIJe5JC2gbzvABg5uXoL86Qse8MwEplmY3KuWiwUbXyWrGMsJewO:05JVNBlXoY971plmY3VuUZ2ewO
Score

7^/10

persistence evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3