Analysis

  • max time kernel
    2738756s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 07:24

General

  • Target
    ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec.apk
  • Size 307KB
  • Sample220508-h8pfvsdhfk
  • SHA256 ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • XLoader Payload 3 IoCs
  • XLoader, MoqHao

    An Android banker and info stealer.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • yujt.hs.pb
    1⤵
    • Loads dropped Dex/Jar
    PID:6176

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dex

        • Path /data/user/0/yujt.hs.pb/files/dex
        • Size 580KB
        • SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/yujt.hs.pb/files/dex
        • Size 580KB
        • SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/yujt.hs.pb/files/dex
        • Size 580KB
        • SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
        • MD5 SHA1 SHA512 SSDEEP