Analysis

  • max time kernel
    2739190s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 07:25

General

  • Target
    1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a.apk
  • Size 306KB
  • Sample220508-h82fesdhgn
  • SHA256 1e2c023a54df424c97a7a2be1e1e4a0fc55e7052b24e2ab82330f2dbd4660f3a
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • XLoader Payload 3 IoCs
  • XLoader, MoqHao

    An Android banker and info stealer.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • giie.pg.hv
    1⤵
    • Loads dropped Dex/Jar
    PID:6324

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dex

        • Path /data/user/0/giie.pg.hv/files/dex
        • Size 580KB
        • SHA256 4e524b5a9fc3a156f673558ebe05c0328320e0910c881831031ee038cf01e8c9
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/giie.pg.hv/files/dex
        • Size 580KB
        • SHA256 4e524b5a9fc3a156f673558ebe05c0328320e0910c881831031ee038cf01e8c9
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/giie.pg.hv/files/dex
        • Size 580KB
        • SHA256 4e524b5a9fc3a156f673558ebe05c0328320e0910c881831031ee038cf01e8c9
        • MD5 SHA1 SHA512 SSDEEP