Analysis

  • max time kernel
    2742637s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 08:21

General

  • Target
    ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039.apk
  • Size 306KB
  • Sample220508-j9dlesffhk
  • SHA256 ad7761a0fa569ab52370b705562ebe80882bcaa1bced451a7d26f9aefb585039
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • XLoader Payload 3 IoCs
  • XLoader, MoqHao

    An Android banker and info stealer.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • tlow.wl.vx
    1⤵
    • Loads dropped Dex/Jar
    PID:6190

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dex

        • Path /data/user/0/tlow.wl.vx/files/dex
        • Size 580KB
        • SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/tlow.wl.vx/files/dex
        • Size 580KB
        • SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/tlow.wl.vx/files/dex
        • Size 580KB
        • SHA256 036b23d4439786988724ac462c7725ab9480295d6ea16c16600205bf2085a954
        • MD5 SHA1 SHA512 SSDEEP