Analysis
- max time kernel
1734484s - max time network
138s - platform
android_x86 - resource
android-x86-arm-20220310-en - submitted
15/06/2022, 11:38
General
- Target japanpost.apk
- Size 504KB
- Sample220615-nryk4ahbd7
- SHA256 0611d4dc55c17f4b8ba2568a478ece83912f5381ac58f5655a90cfdd484f8533
Score
10/10
Malware Config
Signatures
- XLoader Payload 3 IoCs
- XLoader, MoqHao
An Android banker and info stealer.
- Acquires the wake lock. 1 IoCs
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
deeonq.lvbeki.cn.rhi1⤵
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
b
b
b
.msg_device_id.txt