Analysis
-
max time kernel
2428341s -
max time network
153s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
-
submitted
20/12/2023, 07:28
General
-
Target
8f9a8964b0a79a5dfb3233721017bc688ed7a60cbf5938811ed1af9c07cd01fb.apk
-
Size
278KB
-
MD5
8defa94fc2c2ee101e3fdbfa07314e52
-
SHA1
90a018880732bf252e5c3d3fea5d5a07bda79288
-
SHA256
8f9a8964b0a79a5dfb3233721017bc688ed7a60cbf5938811ed1af9c07cd01fb
-
SHA512
8ec529dcd566d2ff54baf08e91cd4e0c5b4f22e045064757208a0345d880a3405b417292ce654635885f9ed67dfea751a8fc536c232834b8da2fc3c2692d6704
-
SSDEEP
6144:GfSBuPpAmgQKM0hFZzkkjTxdA3gky3lXIpSfOWtzIeaG:GBpPgQsPPdA3gky3vfHtzIeB
Malware Config
Signatures
-
XLoader payload 2 IoCs
-
XLoader, MoqHao
An Android banker and info stealer.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes
-
qap.azm.ahr.gkqv1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
509KB
MD5a0cfd683ef1acf06879bb3b578ca2f1e
SHA133dfe4869ec0516d6cdce8e3b7a1ea57fff3eec0
SHA256896a5e048164efaa896f839e09d5eac6239fdfdf67c498dc47982417c14e43ab
SHA5121d1bb6fd9297e696264783ffda96df6eb786eda9aa953ad1abebf3732f767747ce89ff71f9f84fb77a8c5ac342439c0baa6702d3b34dcea4c4f9c95b3ad403d9