Analysis
- max time kernel
2738756s - max time network
160s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 07:24
Static task
static1
Behavioral task
behavioral1
Sample
ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec.apk
- Size 307KB
- Sample220508-h8pfvsdhfk
- SHA256 ac029b3d2b64117bd26fe0e6444e00911616aaf87955270dbebb080a339a03ec
- MD5 f6e7f0b5fa685dc5e8ebd43508425fda
- SHA1 051e788a83f239b0455969ad7a50e5e85cef11fd
- SHA512 edf6658629df20d1f478429a33f087337d6ae8f668a98dccbde06c23d646f4f252c978d405cf9c9a3653fa89dbf2ed9d45c94469e4b2838b36099c0f4f3b4200
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6176-0.dat family_xloader_apk behavioral2/memory/6176-0.dex family_xloader_apk behavioral2/memory/6176-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/yujt.hs.pb/files/dex 6176 yujt.hs.pb /data/user/0/yujt.hs.pb/files/dex 6176 yujt.hs.pb
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/yujt.hs.pb/files/dex
- Size 580KB
- SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
- MD5 7cd65d74580fec16ed1a43df7fe7e8ff
- SHA1 e08a3abc047a248896a18e0df5843f8490a08ad8
- SHA512 6542e7bfd545ba47348f7026b9c419dc74dd052ac0627f8fba8473c782cb48b229f472b0e005097ee89192d9a14a451d46cf60c62d002e479e534fd66c03e41b
- SSDEEP 12288:tl8rbjVUUGTD2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhgRn:/0jVm2P8m/CbEcaLz8m/CbEcaLq8m/C1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/yujt.hs.pb/files/dex
- Size 580KB
- SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
- MD5 7cd65d74580fec16ed1a43df7fe7e8ff
- SHA1 e08a3abc047a248896a18e0df5843f8490a08ad8
- SHA512 6542e7bfd545ba47348f7026b9c419dc74dd052ac0627f8fba8473c782cb48b229f472b0e005097ee89192d9a14a451d46cf60c62d002e479e534fd66c03e41b
- SSDEEP 12288:tl8rbjVUUGTD2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhgRn:/0jVm2P8m/CbEcaLz8m/CbEcaLq8m/C1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/yujt.hs.pb/files/dex
- Size 580KB
- SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
- MD5 7cd65d74580fec16ed1a43df7fe7e8ff
- SHA1 e08a3abc047a248896a18e0df5843f8490a08ad8
- SHA512 6542e7bfd545ba47348f7026b9c419dc74dd052ac0627f8fba8473c782cb48b229f472b0e005097ee89192d9a14a451d46cf60c62d002e479e534fd66c03e41b
- SSDEEP 12288:tl8rbjVUUGTD2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhgRn:/0jVm2P8m/CbEcaLz8m/CbEcaLq8m/C1
- MD5 SHA1 SHA512 SSDEEP