Analysis
- max time kernel
2739190s - max time network
162s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 07:25
Static task
static1
Behavioral task
behavioral1
Sample
1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a.apk
- Size 306KB
- Sample220508-h82fesdhgn
- SHA256 1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a
- MD5 c1dd66cb33422cd682c9335be0f3edeb
- SHA1 1e9aa804f6b487e2d9fe09761a055c4e8760a89c
- SHA512 31222d161c4e01412c9070fcb608f6dac301ce4dc3c7be50b62d3b79df44700e9adecc459fac5e53b9af7f590afbc859a87da0ce350748d273c56d57b2140681
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6324-0.dat family_xloader_apk behavioral2/memory/6324-0.dex family_xloader_apk behavioral2/memory/6324-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/giie.pg.hv/files/dex 6324 giie.pg.hv /data/user/0/giie.pg.hv/files/dex 6324 giie.pg.hv
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/giie.pg.hv/files/dex
- Size 580KB
- SHA256 4e524b5a9fc3a156f673558ebe05c0328320e0910c881831031ee038cf01e8c9
- MD5 69e14a960aaa88973a4830d3652d2b82
- SHA1 9e9953bcb935185bf8a6c9d24a52ad75a044a13d
- SHA512 80ab05dbc5d9b1f3d48a1ccd81d03ba2d98fbe893c054ed2d2279e74e82d877556e8f40de159e889df82b5c68be90a4de60aa039eb18c1be913c2f0687dca74c
- SSDEEP 12288:MJUuMKvdneCjF8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNysgNpVD:MCn8njF8m/CbEcaLz8m/CbEcaLq8m/Ck
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/giie.pg.hv/files/dex
- Size 580KB
- SHA256 4e524b5a9fc3a156f673558ebe05c0328320e0910c881831031ee038cf01e8c9
- MD5 69e14a960aaa88973a4830d3652d2b82
- SHA1 9e9953bcb935185bf8a6c9d24a52ad75a044a13d
- SHA512 80ab05dbc5d9b1f3d48a1ccd81d03ba2d98fbe893c054ed2d2279e74e82d877556e8f40de159e889df82b5c68be90a4de60aa039eb18c1be913c2f0687dca74c
- SSDEEP 12288:MJUuMKvdneCjF8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNysgNpVD:MCn8njF8m/CbEcaLz8m/CbEcaLq8m/Ck
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/giie.pg.hv/files/dex
- Size 580KB
- SHA256 4e524b5a9fc3a156f673558ebe05c0328320e0910c881831031ee038cf01e8c9
- MD5 69e14a960aaa88973a4830d3652d2b82
- SHA1 9e9953bcb935185bf8a6c9d24a52ad75a044a13d
- SHA512 80ab05dbc5d9b1f3d48a1ccd81d03ba2d98fbe893c054ed2d2279e74e82d877556e8f40de159e889df82b5c68be90a4de60aa039eb18c1be913c2f0687dca74c
- SSDEEP 12288:MJUuMKvdneCjF8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNysgNpVD:MCn8njF8m/CbEcaLz8m/CbEcaLq8m/Ck
- MD5 SHA1 SHA512 SSDEEP