Analysis

  • max time kernel
    2753550s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 10:27

General

  • Target
    4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8.apk
  • Size 302KB
  • Sample220508-mg9pyaffa6
  • SHA256 4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • XLoader Payload 3 IoCs
  • XLoader, MoqHao

    An Android banker and info stealer.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • eyxb.ipltk.pdkig
    1⤵
    • Loads dropped Dex/Jar
    PID:6230

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dex

        • Path /data/user/0/eyxb.ipltk.pdkig/files/dex
        • Size 580KB
        • SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/eyxb.ipltk.pdkig/files/dex
        • Size 580KB
        • SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
        • MD5 SHA1 SHA512 SSDEEP

        dex

        • Path /data/user/0/eyxb.ipltk.pdkig/files/dex
        • Size 580KB
        • SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
        • MD5 SHA1 SHA512 SSDEEP