Analysis
- max time kernel
3383709s - max time network
158s - platform
android_x64 - resource
android-x64-20220310-en - submitted
15/05/2022, 21:42
Static task
static1
Behavioral task
behavioral1
Sample
65107334ac028116d2d80a285f55c1c64b9d6011fbc5164e5d16fdb8c7bd2729.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
65107334ac028116d2d80a285f55c1c64b9d6011fbc5164e5d16fdb8c7bd2729.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
65107334ac028116d2d80a285f55c1c64b9d6011fbc5164e5d16fdb8c7bd2729.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 65107334ac028116d2d80a285f55c1c64b9d6011fbc5164e5d16fdb8c7bd2729.apk
- Size 306KB
- Sample220515-1kp2lagde2
- SHA256 65107334ac028116d2d80a285f55c1c64b9d6011fbc5164e5d16fdb8c7bd2729
- MD5 084dfef1a1a77a308aa7239239215c49
- SHA1 ab58d16ae11b29709cddd073e8b9d77ac52b5bf9
- SHA512 00c262b2870d83d404e54267927361c23d251aed2d9513bf5ae2f516faeed1569b365616b446814427a5e3e12c64fbae2fd2a2fe8d1d5095aa417abfe9d54960
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6195-0.dat family_xloader_apk behavioral2/memory/6195-0.dex family_xloader_apk behavioral2/memory/6195-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/bltn.dr.vn/files/dex 6195 bltn.dr.vn /data/user/0/bltn.dr.vn/files/dex 6195 bltn.dr.vn
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/bltn.dr.vn/files/dex
- Size 580KB
- SHA256 b8f6a3769331039a5f2dc29eba3adc431a7b086d47ec579cd143da11f137f13d
- MD5 ed9219be2761d62f01f05dee71f02df3
- SHA1 c2b904961f519a66052c04d444b34ef4c3f00e67
- SHA512 420dc0fa4e231a66fa5c26fbd7952f574aa24aec62ecdf387dd376e98dac93cbea493785d67a030bd6d6745b00c7f3b14b693f906124ee6438b6a227d682f8bd
- SSDEEP 12288:gucD8sjYwzk88m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyjsMf:gfD7Lk88m/CbEcaLz8m/CbEcaLq8m/CA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/bltn.dr.vn/files/dex
- Size 580KB
- SHA256 b8f6a3769331039a5f2dc29eba3adc431a7b086d47ec579cd143da11f137f13d
- MD5 ed9219be2761d62f01f05dee71f02df3
- SHA1 c2b904961f519a66052c04d444b34ef4c3f00e67
- SHA512 420dc0fa4e231a66fa5c26fbd7952f574aa24aec62ecdf387dd376e98dac93cbea493785d67a030bd6d6745b00c7f3b14b693f906124ee6438b6a227d682f8bd
- SSDEEP 12288:gucD8sjYwzk88m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyjsMf:gfD7Lk88m/CbEcaLz8m/CbEcaLq8m/CA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/bltn.dr.vn/files/dex
- Size 580KB
- SHA256 b8f6a3769331039a5f2dc29eba3adc431a7b086d47ec579cd143da11f137f13d
- MD5 ed9219be2761d62f01f05dee71f02df3
- SHA1 c2b904961f519a66052c04d444b34ef4c3f00e67
- SHA512 420dc0fa4e231a66fa5c26fbd7952f574aa24aec62ecdf387dd376e98dac93cbea493785d67a030bd6d6745b00c7f3b14b693f906124ee6438b6a227d682f8bd
- SSDEEP 12288:gucD8sjYwzk88m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyjsMf:gfD7Lk88m/CbEcaLz8m/CbEcaLq8m/CA
- MD5 SHA1 SHA512 SSDEEP