Analysis
- max time kernel
1183296s - max time network
134s - platform
android_x86 - resource
android-x86-arm-20220310-en - submitted
20/04/2022, 09:14
General
- Target 71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91.apk
- Size 313KB
- Sample220420-k7ftfaeef5
- SHA256 71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
- XLoader, MoqHao
An Android banker and info stealer.
- Acquires the wake lock. 1 IoCs
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
itml.iwufh.wxbyj1⤵
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
dex
dex
dex
.msg_device_id.txt