Analysis
- max time kernel
1179704s - max time network
158s - platform
android_x64 - resource
android-x64-20220310-en - submitted
20/04/2022, 09:14
Static task
static1
Behavioral task
behavioral1
Sample
71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91.apk
- Size 313KB
- Sample220420-k7ftfaeef5
- SHA256 71546551bc88e6ac61a116b79d1b485ed6211b33e949326d9043bcdfadacab91
- MD5 7eaf0ef158568acf1c3c30a31681e34f
- SHA1 d31ae0bfd0c1e000075a6e9a0144802293cb6a5a
- SHA512 1db461619f0ac30b963badc2d60c6ab4d2e2c4b5d123f7519b3b396a5979c40136b5191a393589ce8128cbfc8f8ee806b54d0ebeef94ea7661b6a86e8e905028
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6186-0.dat family_xloader_apk behavioral2/memory/6186-0.dex family_xloader_apk behavioral2/memory/6186-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/itml.iwufh.wxbyj/files/dex 6186 itml.iwufh.wxbyj /data/user/0/itml.iwufh.wxbyj/files/dex 6186 itml.iwufh.wxbyj
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/itml.iwufh.wxbyj/files/dex
- Size 580KB
- SHA256 7a60fc73f461b0c1dfb9c9786b44abd00e1c2034440397019a5225631e4679e4
- MD5 f51fa0481451ad4df6c3686f2a41e29a
- SHA1 c38c35f5da0921eedeb256986fbd6bb00314ec0e
- SHA512 af7cbefadd5fce52a10daffb4073154dfab2240616669d3050910eb03a254a6d73932caf5db827fd12d35f217bc79e75524c81b41a7740e050468e37ff96efd9
- SSDEEP 12288:FxaGHR3+miRY698m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHyPs8B:FxPoW698m/CbEcaLz8m/CbEcaLq8m/CW
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/itml.iwufh.wxbyj/files/dex
- Size 580KB
- SHA256 7a60fc73f461b0c1dfb9c9786b44abd00e1c2034440397019a5225631e4679e4
- MD5 f51fa0481451ad4df6c3686f2a41e29a
- SHA1 c38c35f5da0921eedeb256986fbd6bb00314ec0e
- SHA512 af7cbefadd5fce52a10daffb4073154dfab2240616669d3050910eb03a254a6d73932caf5db827fd12d35f217bc79e75524c81b41a7740e050468e37ff96efd9
- SSDEEP 12288:FxaGHR3+miRY698m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHyPs8B:FxPoW698m/CbEcaLz8m/CbEcaLq8m/CW
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/itml.iwufh.wxbyj/files/dex
- Size 580KB
- SHA256 7a60fc73f461b0c1dfb9c9786b44abd00e1c2034440397019a5225631e4679e4
- MD5 f51fa0481451ad4df6c3686f2a41e29a
- SHA1 c38c35f5da0921eedeb256986fbd6bb00314ec0e
- SHA512 af7cbefadd5fce52a10daffb4073154dfab2240616669d3050910eb03a254a6d73932caf5db827fd12d35f217bc79e75524c81b41a7740e050468e37ff96efd9
- SSDEEP 12288:FxaGHR3+miRY698m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHyPs8B:FxPoW698m/CbEcaLz8m/CbEcaLq8m/CW
- MD5 SHA1 SHA512 SSDEEP