xamalicious | 012074928e648f6c483a450d1365c19bf353d8a15ff5968320a2363ce552cc65 | Triage

Sharing

General

Target

com.melonloader.installer_signed.apk
Size

97.2MB
Sample

241123-2ctv9azlfv
MD5

f5042248585a7627d2aee4cdbe3cceb7
SHA1

cc112baa4e68132cf945cbd43a3e7f04dd1183f9
SHA256

012074928e648f6c483a450d1365c19bf353d8a15ff5968320a2363ce552cc65
SHA512

ed4700c71ece60f338cde7ad5c874f5dd7d6ce6f5ddc1a69668a4418532b4e5e0f406e3757707d5fab78b3ad0f2fbed22cc81afb010ac92e0667f7101108c4fa
SSDEEP

786432:f6HJbuUWws9JG6y4zdNX163IF6wCqfO/jFQ4ewas29Mm8:aJjWNdyMQ3IHpfO/jleg29C

Score

10^/10

xamalicious android banker discovery evasion persistence

Malware Config

Targets

- Target
  
  com.melonloader.installer_signed.apk
- Size
  
  97.2MB
- MD5
  
  f5042248585a7627d2aee4cdbe3cceb7
- SHA1
  
  cc112baa4e68132cf945cbd43a3e7f04dd1183f9
- SHA256
  
  012074928e648f6c483a450d1365c19bf353d8a15ff5968320a2363ce552cc65
- SHA512
  
  ed4700c71ece60f338cde7ad5c874f5dd7d6ce6f5ddc1a69668a4418532b4e5e0f406e3757707d5fab78b3ad0f2fbed22cc81afb010ac92e0667f7101108c4fa
- SSDEEP
  
  786432:f6HJbuUWws9JG6y4zdNX163IF6wCqfO/jFQ4ewas29Mm8:aJjWNdyMQ3IHpfO/jleg29C
Score

7^/10

banker discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Legitimate hosting services abused for malware hosting/C2
- Requests allowing to install additional applications from unknown sources.
  evasion
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Subvert Trust Controls

Code Signing Policy Modification

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Software Discovery

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerdiscoveryevasionpersistence