xamalicious | hxxps://greenpoint[.]apkgold[.]in

Analysis

max time kernel
121s
max time network
150s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
05/03/2025, 10:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://greenpoint.apkgold.in

Score

10^/10

xamalicious infostealer spyware trojan

Malware Config

Signatures

Android Xamalicious payload 1 IoCs

resource	yara_rule
behavioral1/files/fstream-7.dat	family_xamalicious

Xamalicious
Xamalicious is an Android backdoor malware implemented with Xamarin framework first seen in December 2023.
trojan infostealer spyware xamalicious
Xamalicious family
xamalicious

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4422

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
129KB

MD5
7d14c05d41ea29029ca9774006dd636c

SHA1
45f29fc376f2f35686026fe17b4d24140a718d5a

SHA256
8ff64115d8c1fbf38a38979af47c0a0f77b1b983bc3d7fd0bbfcac55010fe445

SHA512
04e909d4813468ba3650fd7ff190f8e25499801f51ebfb2037bfc1aa3eb8e160fb354c7a0d3af8a410516889c86c2dbecc609fef4862d13e55a6519caae46eda

Download Submit
/storage/emulated/0/Download/.pending-1741774305-GreenPoint-1.4.15.apk

Filesize
2.1MB

MD5
e99f17e2e9a6f797f7bc8f50648b09ae

SHA1
82fd5b529637ed4c10eefbbcbb74f9ea0122b12f

SHA256
57cd99273ce8993dfb96325d87b0bf2297cb4eda34362288971179a2d711a8e7

SHA512
c4edd35d2d3c15b3cadd5433998d46f04e0805f4eb1e89b262edea6fb1e73967c05d7c145f4f8453c76a3f12bc64cd8f6cf4ffac13a28d3c4e2f5ae23e02d402

Download Submit
/storage/emulated/0/Download/.pending-1741774305-GreenPoint-1.4.15.apk

Filesize
2.2MB

MD5
be3e68258ddcc4e8f02b8656be9660b5

SHA1
31d0805e268554885ca588c90f24b8ea84decb49

SHA256
a0a99205f8a4428ecc9da114a899c334de8e17333b36987bf7a3b0048625897a

SHA512
863226e02a34e854b68f729baaab6199024a848fc09b10b469f664013eb58b2b1394349d1ded16053f6cf0741604da814bee4485c30886748207197128467036

Download Submit
/storage/emulated/0/Download/.pending-1741774305-GreenPoint-1.4.15.apk

Filesize
25.7MB

MD5
f74bd94690fc6f584928ca9f51952e79

SHA1
868a15e14c91ddeb5bdb9fe81c57655d6e70a815

SHA256
161be524fb3bd88c9247641dfdbeec999e4794ce05fe166052b616395eac1e83

SHA512
8e152b41d203e442587be66d97b4ee76e4e14f44945ab4aa305260fdf3c3d96aff96ba4778508b9f6a8eb603a7291ba6db7d12183d54b6d444d7d904b9d68db8

Download Submit
/storage/emulated/0/Download/.pending-1741774305-GreenPoint-1.4.15.apk (deleted)

Filesize
815KB

MD5
41fba210ad902a524b96e37fa190a896

SHA1
9fa66f3dd923bc2f5ac229e9f62856ed41936edc

SHA256
ad60d56148c4fc144e54faefe84334dcd7e74024c632139000b1d2bcccfc28fd

SHA512
223194f7ddd8e297b4a96f1933d9ac29f79b8c681ddf69b7c43fd58586433e891c4b500a40ae0bb3d07d3692fdc368f41854d3591b5d871b41db432941694591

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads