Analysis
- max time kernel
2753550s - max time network
166s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 10:27
Static task
static1
Behavioral task
behavioral1
Sample
4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8.apk
- Size 302KB
- Sample220508-mg9pyaffa6
- SHA256 4ca168ecd100c5de6841c6dd7828e5e48cb0098aff526bf306545303786df6a8
- MD5 776e74e1d337c3d5228d24f4754245d2
- SHA1 996008b13a94d27411d3f5a74f8bfad8798e7e6d
- SHA512 333733db33968c2cd19f4ca2985b7c0c1ffaed0ed136e88d2ca588005f5faeddfd162351e4b21c8c589398a968497ae00b871cca9decb46a4564dd4b8f82a000
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6230-0.dat family_xloader_apk behavioral2/memory/6230-0.dex family_xloader_apk behavioral2/memory/6230-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/eyxb.ipltk.pdkig/files/dex 6230 eyxb.ipltk.pdkig /data/user/0/eyxb.ipltk.pdkig/files/dex 6230 eyxb.ipltk.pdkig
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/eyxb.ipltk.pdkig/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/eyxb.ipltk.pdkig/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/eyxb.ipltk.pdkig/files/dex
- Size 580KB
- SHA256 0cd2b17aa21cd8de63842da21e3464df7bb2bd4a278fffbbfea6b294c3ca9e6d
- MD5 8c7542abcfd5e2c08e99555d8d0bc605
- SHA1 5f40007a5343603be18a1ce3c39ce43604099be5
- SHA512 362c7dd23aa52a9c72e9d90eebb99e1d4e4cd01b68348249bbeee4bb407728aabd30874488926635bacb2e1d640ad4e95852e345afa8ad66057c80c8f768ed88
- SSDEEP 12288:fx7MyZWfMXNwx/wVx8m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUHy+sUa:fxFrNVx8m/CbEcaLz8m/CbEcaLq8m/Cc
- MD5 SHA1 SHA512 SSDEEP