xloader_apk | 14e67b92c8a44a45ecff3334fb6f1dba3466642177bb8fb20f39482c79d56e91 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
14e67b92c8a44a45ecff3334fb6f1dba3466642177bb8fb20f39482c79d56e91.apk
Size 356KB
Sample220123-kh3lxaffcj
SHA256 14e67b92c8a44a45ecff3334fb6f1dba3466642177bb8fb20f39482c79d56e91
MD5 b7308b83834786e908c19597e14ce792
SHA1 4c04a7ade3f275b77d730405c7db060f6a8402c0
SHA512 bbb88d3f6ea2a36c30232bd7e6867b5e76fd977154816f73e9bd5309a120576f381ba8ba1d40ebda23a687bad64cc0389c9f850e2cf2214b7a4bd53cad6d6488
MD5 SHA1 SHA512

Score

10^/10

xloader_apk android banker infostealer ransomware trojan

Malware Config

Targets

- Target
  14e67b92c8a44a45ecff3334fb6f1dba3466642177bb8fb20f39482c79d56e91.apk
- Size 356KB
- SHA256 14e67b92c8a44a45ecff3334fb6f1dba3466642177bb8fb20f39482c79d56e91
- MD5 b7308b83834786e908c19597e14ce792
- SHA1 4c04a7ade3f275b77d730405c7db060f6a8402c0
- SHA512 bbb88d3f6ea2a36c30232bd7e6867b5e76fd977154816f73e9bd5309a120576f381ba8ba1d40ebda23a687bad64cc0389c9f850e2cf2214b7a4bd53cad6d6488
- MD5 SHA1 SHA512
Score

10^/10

xloader_apk banker infostealer ransomware trojan
- XLoader Payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankerinfostealerransomwaretrojan