Analysis
-
max time kernel
2375207s -
max time network
154s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
-
submitted
20/12/2023, 06:33
General
-
Target
8c0d4a1d401943bf1f39b17d9c01e89d48ca192041a4fe59e3fdfcbbfd6ff169.apk
-
Size
278KB
-
MD5
ad8f13c15bf702a1f22f00bd19a8a9b7
-
SHA1
c42436fc74ec5cf9749aef23c741e87077cc84fa
-
SHA256
8c0d4a1d401943bf1f39b17d9c01e89d48ca192041a4fe59e3fdfcbbfd6ff169
-
SHA512
8d37996c87e3f9a0cc12822b4878f439dfcd3c65114c99ef85442ddb45b3a368e35fbf1218a490356421adba03cd76d848a90832e002e30d5e8adf1f9c889022
-
SSDEEP
6144:lKe/GCzUiyiuguhZNt6E0PxYTvBxnf7Ucpzq9R+Bo8/y5c:3rzKhZtEPS5Rc9sC5c
Malware Config
Signatures
-
XLoader payload 2 IoCs
-
XLoader, MoqHao
An Android banker and info stealer.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes
-
thb.xped.jlnwa.ghowd1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
509KB
MD5a0cfd683ef1acf06879bb3b578ca2f1e
SHA133dfe4869ec0516d6cdce8e3b7a1ea57fff3eec0
SHA256896a5e048164efaa896f839e09d5eac6239fdfdf67c498dc47982417c14e43ab
SHA5121d1bb6fd9297e696264783ffda96df6eb786eda9aa953ad1abebf3732f767747ce89ff71f9f84fb77a8c5ac342439c0baa6702d3b34dcea4c4f9c95b3ad403d9