xamalicious | com[.]medoc[.]cashalot[.]ingenico_19[.]675[.]DX[.]Signed[.]apk

General

Target

com.medoc.cashalot.ingenico_19.675.DX.Signed.apk
Size

37.7MB
MD5

20706c6838a24301907d8f8967acdc64
SHA1

dcea291ab704a9f4143fe1fe618c63259b6e0356
SHA256

b04bb57699fed3cb0987a66e04b12b6c48319f9f5fe8ce1d26853c3ab1709cdb
SHA512

972d06553ad26b78b0a4d46d685ddbf18e415518fdfb277a6b9028a81f1b3f22d490bfb8cf6bce67ddcb3b99119e1ac1143e5c5e554785e045dade5c8306fb4d
SSDEEP

393216:EGPdKz3dP1lKb0by7UpMIo0r0Rb/u8t19wuCzS1znXbabgQWnHNytebOtJCLtR9e:Ejlxp3YRbljMSNXbaiHNqK7OUGN

Score

10^/10

Android Xamalicious payload 1 IoCs

resource	yara_rule
sample	family_xamalicious

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.PRIVATE_EXTERNAL_STORAGE

android.permission.PUBLIC_EXTERNAL_STORAGE

android.permission.BLUETOOTH_PRIVILEGED

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.ingenico.payment.permission.MAKE_PAYMENT

com.ingenico.payment.permission.UPDATE_PAYMENT

com.ingenico.batch.permission.CLOSE_BATCH

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE