Analysis
- max time kernel
2742637s - max time network
167s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 08:21
Static task
static1
Behavioral task
behavioral1
Sample
ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039.apk
- Size 306KB
- Sample220508-j9dlesffhk
- SHA256 ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039
- MD5 033575c163df5c5624ee405677cc1568
- SHA1 d3d2ca75616c52800839f77fff1cb0d388f73aa0
- SHA512 9d11d5a5c1edc738a42584e2cae4573b0cd7aeea4aec21eca720e2efca695e1338b0d8b5a50d903b7f14dab5814dfd0d9f6480d8fd9ffe580e57f57166d007be
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6190-0.dat family_xloader_apk behavioral2/memory/6190-0.dex family_xloader_apk behavioral2/memory/6190-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/tlow.wl.vx/files/dex 6190 tlow.wl.vx /data/user/0/tlow.wl.vx/files/dex 6190 tlow.wl.vx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/tlow.wl.vx/files/dex
- Size 580KB
- SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
- MD5 7cd65d74580fec16ed1a43df7fe7e8ff
- SHA1 e08a3abc047a248896a18e0df5843f8490a08ad8
- SHA512 6542e7bfd545ba47348f7026b9c419dc74dd052ac0627f8fba8473c782cb48b229f472b0e005097ee89192d9a14a451d46cf60c62d002e479e534fd66c03e41b
- SSDEEP 12288:tl8rbjVUUGTD2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhgRn:/0jVm2P8m/CbEcaLz8m/CbEcaLq8m/C1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/tlow.wl.vx/files/dex
- Size 580KB
- SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
- MD5 7cd65d74580fec16ed1a43df7fe7e8ff
- SHA1 e08a3abc047a248896a18e0df5843f8490a08ad8
- SHA512 6542e7bfd545ba47348f7026b9c419dc74dd052ac0627f8fba8473c782cb48b229f472b0e005097ee89192d9a14a451d46cf60c62d002e479e534fd66c03e41b
- SSDEEP 12288:tl8rbjVUUGTD2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhgRn:/0jVm2P8m/CbEcaLz8m/CbEcaLq8m/C1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/tlow.wl.vx/files/dex
- Size 580KB
- SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
- MD5 7cd65d74580fec16ed1a43df7fe7e8ff
- SHA1 e08a3abc047a248896a18e0df5843f8490a08ad8
- SHA512 6542e7bfd545ba47348f7026b9c419dc74dd052ac0627f8fba8473c782cb48b229f472b0e005097ee89192d9a14a451d46cf60c62d002e479e534fd66c03e41b
- SSDEEP 12288:tl8rbjVUUGTD2P8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyhgRn:/0jVm2P8m/CbEcaLz8m/CbEcaLq8m/C1
- MD5 SHA1 SHA512 SSDEEP