General

  • Target
    rmmqlfutmu.apk
  • Size 440KB
  • Sample231012-eca2tafc65
  • SHA256 0a899df56f6f4918ddcb24a1e5c4d82031203809cdfc08e4b344102435b5f3e1
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      rmmqlfutmu.apk
    • Size 440KB
    • SHA256 0a899df56f6f4918ddcb24a1e5c4d82031203809cdfc08e4b344102435b5f3e1
    • MD5 SHA1 SHA512 SSDEEP
    • XLoader payload

    • XLoader, MoqHao

      An Android banker and info stealer.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks