Analysis
- max time kernel
3383852s - max time network
166s - platform
android_x64 - resource
android-x64-20220310-en - submitted
15/05/2022, 21:44
Static task
static1
Behavioral task
behavioral1
Sample
4ac3058ee8c8d8fa3d780d86efb6266eede124645866c3fcc15256c1603eff9e.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4ac3058ee8c8d8fa3d780d86efb6266eede124645866c3fcc15256c1603eff9e.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
4ac3058ee8c8d8fa3d780d86efb6266eede124645866c3fcc15256c1603eff9e.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 4ac3058ee8c8d8fa3d780d86efb6266eede124645866c3fcc15256c1603eff9e.apk
- Size 308KB
- Sample220515-1lmmvsaghk
- SHA256 4ac3058ee8c8d8fa3d780d86efb6266eede124645866c3fcc15256c1603eff9e
- MD5 1825028237b254f1580e982d479c7870
- SHA1 d6e9f8fe290a2432e6beaa5b81c5832d8d09fab8
- SHA512 0d5fa8cdda8c15bde9c21ee93c44c2be450e6d09a0c247ea14231fe8b971b7907165a4ac2cdd6768387b5b97a36e77264f6197458b5b9c457f57eee25a63c3f5
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
resource yara_rule behavioral2/files/6028-0.dat family_xloader_apk behavioral2/memory/6028-0.dex family_xloader_apk behavioral2/memory/6028-1.dex family_xloader_apk - XLoader, MoqHao
An Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/mnti.cb.bz/files/dex 6028 mnti.cb.bz /data/user/0/mnti.cb.bz/files/dex 6028 mnti.cb.bz - Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal mnti.cb.bz
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/mnti.cb.bz/files/dex
- Size 580KB
- SHA256 b8f6a3769331039a5f2dc29eba3adc431a7b086d47ec579cd143da11f137f13d
- MD5 ed9219be2761d62f01f05dee71f02df3
- SHA1 c2b904961f519a66052c04d444b34ef4c3f00e67
- SHA512 420dc0fa4e231a66fa5c26fbd7952f574aa24aec62ecdf387dd376e98dac93cbea493785d67a030bd6d6745b00c7f3b14b693f906124ee6438b6a227d682f8bd
- SSDEEP 12288:gucD8sjYwzk88m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyjsMf:gfD7Lk88m/CbEcaLz8m/CbEcaLq8m/CA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/mnti.cb.bz/files/dex
- Size 580KB
- SHA256 b8f6a3769331039a5f2dc29eba3adc431a7b086d47ec579cd143da11f137f13d
- MD5 ed9219be2761d62f01f05dee71f02df3
- SHA1 c2b904961f519a66052c04d444b34ef4c3f00e67
- SHA512 420dc0fa4e231a66fa5c26fbd7952f574aa24aec62ecdf387dd376e98dac93cbea493785d67a030bd6d6745b00c7f3b14b693f906124ee6438b6a227d682f8bd
- SSDEEP 12288:gucD8sjYwzk88m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyjsMf:gfD7Lk88m/CbEcaLz8m/CbEcaLq8m/CA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/mnti.cb.bz/files/dex
- Size 580KB
- SHA256 b8f6a3769331039a5f2dc29eba3adc431a7b086d47ec579cd143da11f137f13d
- MD5 ed9219be2761d62f01f05dee71f02df3
- SHA1 c2b904961f519a66052c04d444b34ef4c3f00e67
- SHA512 420dc0fa4e231a66fa5c26fbd7952f574aa24aec62ecdf387dd376e98dac93cbea493785d67a030bd6d6745b00c7f3b14b693f906124ee6438b6a227d682f8bd
- SSDEEP 12288:gucD8sjYwzk88m/CbEcaLz8m/CbEcaLq8m/CbEcaLb8m/CbEcaLUNyjsMf:gfD7Lk88m/CbEcaLz8m/CbEcaLq8m/CA
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/.msg_device_id.txt
- Size 36B
- SHA256 7a07f61667e567369910b5642576cff53a8ff937a16263d77e140500079fe65a
- MD5 35b6ef9ea0235de0d435c12caefe34c2
- SHA1 5c58d9992a04799ec814cc7bf26ba6a5acd718f6
- SHA512 e97a81db1dae9c3db2fbb817e9c4ab5ab0d8175f56c86425714dc1b33b6ef0c5efc4fc8850a7c3fefdc168a5a7231434e463174a8bbd47cea4dc1f5cca88ef76
- MD5 SHA1 SHA512