xamalicious | hxxps://apkbog[.]com/en/apk/greenpoint

Resubmissions

04/03/2025, 14:22

250304-rpm85asrx4 10

04/03/2025, 14:17

250304-rlpmsastax 1

Analysis

max time kernel
145s
max time network
152s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
04/03/2025, 14:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://apkbog.com/en/apk/greenpoint

Score

10^/10

xamalicious infostealer spyware trojan

Malware Config

Signatures

Android Xamalicious payload 1 IoCs

resource	yara_rule
behavioral1/files/fstream-6.dat	family_xamalicious

Xamalicious
Xamalicious is an Android backdoor malware implemented with Xamarin framework first seen in December 2023.
trojan infostealer spyware xamalicious
Xamalicious family
xamalicious

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4452

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
56B

MD5
cecb649cb1fb79c3736936fcbef3bbf2

SHA1
2c95183d7d2b0cd68d15b3c4115189351fc08720

SHA256
09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324

SHA512
b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de

Download Submit
files/dom-1.html

Filesize
155KB

MD5
b43a3f3a8ae1894fb46267b0c0d516eb

SHA1
1084f492588c7b6d146b34d10bead67317fc6cb3

SHA256
4f9e1b42e5193e15ab3b3316c68f7d67971a304ad06bc1a348345e51b18318fb

SHA512
37dbf3468ebe54c0608d36a4a444fb3577f260caa0ed24b45f275de270e3842566e74031af9bb0e598f11b70dc15f3204173b8dba0ac7b87ce3bf30c25ee9053

Download Submit
/storage/emulated/0/Download/.pending-1741702989-GreenPoint-1.4.15.apk

Filesize
4.1MB

MD5
4e8f92888018b3126ecca7dca80a75cb

SHA1
47b36387819bbd835d6a6650423da8d3d3d67b47

SHA256
3c0892d95408c38a101ee49b2e1ac38562c0838ba8a4368b099f34ac10316a46

SHA512
6b7360930dcfa244863f90126be7f5d596b239995eb02f471dddabcc3329bdcb92af06769b6adacc5dc7ced9050551329136ce61e33bd524da4a1f5915a35ebc

Download Submit
/storage/emulated/0/Download/.pending-1741702989-GreenPoint-1.4.15.apk

Filesize
25.7MB

MD5
b432fe6c75758eaf2f0f2ff403380be4

SHA1
8819cfa29dd1b6bc993339262698ccfa86e062c4

SHA256
370f501bb3fe94861035a4430d5ce26e9dbdc6ecbae0e884d5c7e8a2ff66da44

SHA512
8f5b16319ddc8c63cfb1bf2fe21af008c50c4ab5334e47fbd82f178a9738499d863731274fb8983c2d1fe9755111e485f26eb5dae2440bd644843ccff82bd03c

Download Submit
/storage/emulated/0/Download/.pending-1741702989-GreenPoint-1.4.15.apk (deleted)

Filesize
719KB

MD5
dd18e82683780e2945cf362f24158b27

SHA1
e179fdb78eea64f769fa4e7f35e0ec900a99d718

SHA256
53d3bff41fe56ad9b3c4a6d3ab257596bef24813384c318fff71a4295841cba1

SHA512
f9f9fc1b32aaa190a1a9625a1910a987e3d83209d116ac271668db37e77aafca36ca8d0f29b86d36474582996c3c0913ed3c05e7dd508c079efdbffec45cb886

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads