Analysis
- max time kernel
2734653s - max time network
162s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 06:38
Static task
static1
Behavioral task
behavioral1
Sample
076970b9d3690a215d8489aee83ae9b1aa157a215f6ac1207ceb2e4182c6596a.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
076970b9d3690a215d8489aee83ae9b1aa157a215f6ac1207ceb2e4182c6596a.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
076970b9d3690a215d8489aee83ae9b1aa157a215f6ac1207ceb2e4182c6596a.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 076970b9d3690a215d8489aee83ae9b1aa157a215f6ac1207ceb2e4182c6596a.apk
- Size 302KB
- Sample220508-hegh6acegm
- SHA256 076970b9d3690a215d8489aee83ae9b1aa157a215f6ac1207ceb2e4182c6596a
- MD5 0cfb0ea471750eee368b71e239bd1cea
- SHA1 d7c30c51ee149969909684b6ca7488e9817de9d7
- SHA512 79a787765ca013f2b8ea4322517b9f8e4c2dd7e3dd8d54c75c5105570f957a619fe671b3be6a75dfdf1e7fc3bf68a80e287f28a9cd72c3bb2c2ce2037a57f4c5
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6185-0.dat family_xloader_apk behavioral2/memory/6185-0.dex family_xloader_apk behavioral2/memory/6185-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/zqgd.bwqay.wekcq/files/dex 6185 zqgd.bwqay.wekcq /data/user/0/zqgd.bwqay.wekcq/files/dex 6185 zqgd.bwqay.wekcq
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/zqgd.bwqay.wekcq/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/zqgd.bwqay.wekcq/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/zqgd.bwqay.wekcq/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP