Analysis
- max time kernel
2738982s - max time network
160s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 07:24
Static task
static1
Behavioral task
behavioral1
Sample
554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995.apk
- Size 307KB
- Sample220508-h8t2cadhfp
- SHA256 554e244dc977726a6f64adbdbc0caf82b83a98a8a7688870ed90ab6791436995
- MD5 f4e0a3cdd9574e8aecc86f6004c9815d
- SHA1 69317254fa9b2c7a845d8bc3dd20abcfbb6f69bf
- SHA512 153c520155244c4c96de09ef809120847fea58bbce6fc2a943e26aba983be402c4049cad82acf88d5a81ae2dfe3af73445056336179aa0016e7255c0560791fc
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6219-0.dat family_xloader_apk behavioral2/memory/6219-0.dex family_xloader_apk behavioral2/memory/6219-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/ugeh.oa.jr/files/dex 6219 ugeh.oa.jr /data/user/0/ugeh.oa.jr/files/dex 6219 ugeh.oa.jr
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/ugeh.oa.jr/files/dex
- Size 580KB
- SHA256 32b77b96d99b38f0c4d53acddf13aaf7c5b11311b135b668d866fdf884892fdc
- MD5 089da8bdc4005fb5f62416a8644e8aea
- SHA1 5619867d114054bb91edace2a38208bc72b93f13
- SHA512 f5ca271be8e0ae8141f5406dd7633cf2ae92e1e327cb928c826f75254f6bebe2ebdb2a785929418201e654ca21d24e4892f146011d8001f6a91e98764788dbbd
- SSDEEP 12288:7l8rbjHUyGTu2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhtRJ:B0jZL2P8m/CbEcaLz8m/CbEcaLq8m/C2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ugeh.oa.jr/files/dex
- Size 580KB
- SHA256 32b77b96d99b38f0c4d53acddf13aaf7c5b11311b135b668d866fdf884892fdc
- MD5 089da8bdc4005fb5f62416a8644e8aea
- SHA1 5619867d114054bb91edace2a38208bc72b93f13
- SHA512 f5ca271be8e0ae8141f5406dd7633cf2ae92e1e327cb928c826f75254f6bebe2ebdb2a785929418201e654ca21d24e4892f146011d8001f6a91e98764788dbbd
- SSDEEP 12288:7l8rbjHUyGTu2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhtRJ:B0jZL2P8m/CbEcaLz8m/CbEcaLq8m/C2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ugeh.oa.jr/files/dex
- Size 580KB
- SHA256 32b77b96d99b38f0c4d53acddf13aaf7c5b11311b135b668d866fdf884892fdc
- MD5 089da8bdc4005fb5f62416a8644e8aea
- SHA1 5619867d114054bb91edace2a38208bc72b93f13
- SHA512 f5ca271be8e0ae8141f5406dd7633cf2ae92e1e327cb928c826f75254f6bebe2ebdb2a785929418201e654ca21d24e4892f146011d8001f6a91e98764788dbbd
- SSDEEP 12288:7l8rbjHUyGTu2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhtRJ:B0jZL2P8m/CbEcaLz8m/CbEcaLq8m/C2
- MD5 SHA1 SHA512 SSDEEP