Analysis
- max time kernel
2739588s - max time network
163s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 07:53
Static task
static1
Behavioral task
behavioral1
Sample
d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194.apk
- Size 302KB
- Sample220508-jrbdcabhe5
- SHA256 d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194
- MD5 6533f6334f394506d15edf87c8f53905
- SHA1 8970dabbda6fe7f0263030a01ecbe4c1de7cf7ec
- SHA512 f058e0bf810b1d68cf4617315c3ad8e57d40e47387a65ca6b9e08f2727d11cf929ea6d7bf5cb7458d6bf187c063c3e33407ebb6eeacc4355a2b09f62003831c5
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6179-0.dat family_xloader_apk behavioral2/memory/6179-0.dex family_xloader_apk behavioral2/memory/6179-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/onhw.hzysf.wdjoj/files/dex 6179 onhw.hzysf.wdjoj /data/user/0/onhw.hzysf.wdjoj/files/dex 6179 onhw.hzysf.wdjoj - Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal onhw.hzysf.wdjoj
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/onhw.hzysf.wdjoj/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/onhw.hzysf.wdjoj/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/onhw.hzysf.wdjoj/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/.msg_device_id.txt
- Size 36B
- SHA256 31fe488f3198ae652f41888ed80967b6d28f203c00abf570102950741afcaf95
- MD5 0fbb8c9c9c0b6f22440b9509b28dea48
- SHA1 36165a813476fc445fb579c6b092e72cedc5614f
- SHA512 8eebda13f014d7eefba5e4c52b93d7f81781d6f28199086d6af6fcec2cfa96c7a81c4aab9385effeb3ac7356e93e1a30103f30ca7bd3bbcb25b87b7d76baded8
- MD5 SHA1 SHA512