General

  • Target

    base.apk

  • Size

    51.2MB

  • MD5

    b4187e94f5c339a1a4ef288efc049d80

  • SHA1

    c56d4b5e03859e82320440ff6fb3e3d77bfd1b0d

  • SHA256

    e0c11cfc90ba3664b5e53903ace7696bf4ec00c83fc5c56e7157b53df818086b

  • SHA512

    37687e994d945753c7b144443a8b36b0f1104e926323b8067d3ed6384ada64da52bee35cefdcdac6b32682457202f3855032ad7d1d0081e847bb24c230a2e09f

  • SSDEEP

    786432:uPCv3Rlgd44SJ7QTTxwbEU0+ehmbO46LABQylHQ4hRxt7OUa:fh6dHTAQkQABQylHQ4hRbOUa

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 2 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 6 IoCs

Files

  • base.apk
    .apk android

    com.medoc.cashalot

    crc644bf7db1f14d245f5.MainActivity


Android Permissions

base.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.PRIVATE_EXTERNAL_STORAGE

android.permission.PUBLIC_EXTERNAL_STORAGE

android.permission.BLUETOOTH_PRIVILEGED

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

com.google.android.gms.permission.AD_ID

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

com.medoc.cashalot.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE