xloader_apk | 94ecb0ca511764d819641cf7c45d11f067abd21697a7bd200160b020e6c9bd98 | Triage™

Resubmissions

23/04/2022, 16:24

220423-twexfadcc810

20/04/2022, 09:14

220420-k7eldabael10

Sharing

Copy URL Twitter E-mail

General

Target
94ecb0ca511764d819641cf7c45d11f067abd21697a7bd200160b020e6c9bd98
Size 303KB
Sample220423-twexfadcc8
SHA256 94ecb0ca511764d819641cf7c45d11f067abd21697a7bd200160b020e6c9bd98
MD5 f343110a995940e3e477ba66d1b71bbc
SHA1 eb48fd144c3e226c22bc4515ce333c61e9653cc2
SHA512 cdde6794197ff6b0ca4901c17e5d9c7161b320282d3606b2088761f399d1a6a07ef4783b19c5e1f959ad1954c6dc3577e2c655208bd46856c438eac81e35831a
MD5 SHA1 SHA512

Score

10^/10

xloader_apk android banker infostealer ransomware trojan

Malware Config

Targets

- Target
  94ecb0ca511764d819641cf7c45d11f067abd21697a7bd200160b020e6c9bd98
- Size 303KB
- SHA256 94ecb0ca511764d819641cf7c45d11f067abd21697a7bd200160b020e6c9bd98
- MD5 f343110a995940e3e477ba66d1b71bbc
- SHA1 eb48fd144c3e226c22bc4515ce333c61e9653cc2
- SHA512 cdde6794197ff6b0ca4901c17e5d9c7161b320282d3606b2088761f399d1a6a07ef4783b19c5e1f959ad1954c6dc3577e2c655208bd46856c438eac81e35831a
- MD5 SHA1 SHA512
Score

10^/10

xloader_apk banker infostealer ransomware trojan
- XLoader Payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Acquires the wake lock.
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankerinfostealerransomwaretrojan