xloader_apk | 30bdf42374a5bb6a83be08f9667e0a9395e411f911dab08d9c0814d30fb0e260 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
30bdf42374a5bb6a83be08f9667e0a9395e411f911dab08d9c0814d30fb0e260
Size 440KB
Sample220207-q31kyacfa6
SHA256 30bdf42374a5bb6a83be08f9667e0a9395e411f911dab08d9c0814d30fb0e260
MD5 ddd131d7f0918ece86cc7a68cbacb37d
SHA1 1ec6768018b2a78115156517bff03485264ff529
SHA512 751d7eba91449da9057159f943eee13857377543cf3e2721a3f9eaaeaf1e9721ef27b2d73a456333899fa7e70285fe338e775c97b69e46d3159a3bd4313e3b71
MD5 SHA1 SHA512

Score

10^/10

xloader_apk android banker infostealer ransomware trojan

Malware Config

Targets

- Target
  30bdf42374a5bb6a83be08f9667e0a9395e411f911dab08d9c0814d30fb0e260
- Size 440KB
- SHA256 30bdf42374a5bb6a83be08f9667e0a9395e411f911dab08d9c0814d30fb0e260
- MD5 ddd131d7f0918ece86cc7a68cbacb37d
- SHA1 1ec6768018b2a78115156517bff03485264ff529
- SHA512 751d7eba91449da9057159f943eee13857377543cf3e2721a3f9eaaeaf1e9721ef27b2d73a456333899fa7e70285fe338e775c97b69e46d3159a3bd4313e3b71
- MD5 SHA1 SHA512
Score

10^/10

xloader_apk banker infostealer ransomware trojan
- XLoader Payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankerinfostealerransomwaretrojan