Analysis

  • max time kernel
    2738982s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 07:24

General

  • Target
    554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995.apk
  • Size 307KB
  • Sample220508-h8t2cadhfp
  • SHA256 554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • XLoader Payload 3 IoCs
  • XLoader, MoqHao

    An Android banker and info stealer.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • ugeh.oa.jr
    1⤵
    • Loads dropped Dex/Jar
    PID:6219

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dex

        • Path /data/user/0/ugeh.oa.jr/files/dex
        • Size 580KB
        • SHA256 32b77b96d99b38f0c4d53acddf13aaf7c5b11311b135b668d866fdf884892fdc
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/ugeh.oa.jr/files/dex
        • Size 580KB
        • SHA256 32b77b96d99b38f0c4d53acddf13aaf7c5b11311b135b668d866fdf884892fdc
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/ugeh.oa.jr/files/dex
        • Size 580KB
        • SHA256 32b77b96d99b38f0c4d53acddf13aaf7c5b11311b135b668d866fdf884892fdc
        • MD5 SHA1 SHA512 SSDEEP