Analysis
- max time kernel
2739613s - max time network
148s - platform
android_x64 - resource
android-x64-arm64-20220310-en - submitted
08/05/2022, 07:53
General
- Target d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194.apk
- Size 302KB
- Sample220508-jrbdcabhe5
- SHA256 d359e7bf4f45fee67d4db5e92f2e45a7be9f5dc48a7addb9ab9d04f5bd205194
Score
10/10
Malware Config
Signatures
- XLoader Payload 2 IoCs
- XLoader, MoqHao
An Android banker and info stealer.
- Acquires the wake lock. 1 IoCs
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
onhw.hzysf.wdjoj1⤵
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
dex
dex
.msg_device_id.txt