Extracted

• • Target
    e08345ad38a2ff8c775f138e0e6b461d4560970f1978c992d2dc9b0fbd4f0f76.bin
  • Size 282KB
  • SHA256 e08345ad38a2ff8c775f138e0e6b461d4560970f1978c992d2dc9b0fbd4f0f76
  • MD5 2ddf1281459e4a8f12655fc756b918f6
  • SHA1 e03c5414e2373a57371ce698897134130f5b9e77
  • SHA512 a897cb06d3af322e78f71dc90e1d3faaac61cfd8168638626d62ecbc7ae92aa0a5292dd17419da9100aee1a271120472a2940db5fde2645e6d3386cb60c11410
  • SSDEEP 6144:G9VZYKCJxpxjPKkl4ojRW+eL2GbtK/TgS8R8vspydyEZGd17o5jnqJyy:ULYBjik9js+eL2ys/Tv8R8vt9aposX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  xloader_apkbankerevasioninfostealerransomwaretrojan

  • XLoader payload

  • XLoader, MoqHao

    An Android banker and info stealer.

    trojaninfostealerbankerxloader_apk

  • Acquires the wake lock.

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Uses Crypto APIs (Might try to encrypt user data).

    ransomware
  behavioral1