xamalicious | tModLoader[.]apk

General

Target

tModLoader.apk
Size

309.3MB
MD5

7a1767a97d64761c087b9071f38c15a6
SHA1

bb16de7f237bc4a79b9581b4e66d3d02fdf4fe0c
SHA256

6b5d18d54d576637adce73cdd865d42f8a2e9449cb70564c6e36d86e45f546af
SHA512

8681595fa46d15f7d55622bdbfb8435400dff2016160691252a946413c10ab66deab5f985593e450b2f0fa2c9474249087eda655890e2685bd8e5e7294a93df5
SSDEEP

6291456:3seGlKC5rnHlgFr5VJGy57HR+JopxeUlNaQtK:3HZCJnFsfGy59CopxvnaQY

Score

10^/10

xamalicious

Android Xamalicious payload 1 IoCs

Processes:

resource	yara_rule
sample	family_xamalicious

Requests dangerous framework permissions 2 IoCs

Processes:

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET