Analysis
-
max time kernel
2458455s -
max time network
151s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
-
submitted
20/12/2023, 09:27
General
-
Target
9cb137ed6b8c66d20ea9a0b07749dff644eda38280fe25efe70257fbae2edc30.apk
-
Size
278KB
-
MD5
1977a4702d1fd5f3ba6ff64ca950fb43
-
SHA1
3cd1c8141031dfbb82d32c84a2e96b864825c349
-
SHA256
9cb137ed6b8c66d20ea9a0b07749dff644eda38280fe25efe70257fbae2edc30
-
SHA512
965fa40f259c41289567bed4736fc668afc1a785e6973a04619c8b74a6ee17601a52240e2ca0a72e085a9bbf15b1fd391807774d5a344b4dc1a823d90b4e261e
-
SSDEEP
6144:ogMKGsmmULSv0tpNpaBq98iEeCfGTWr4ADDcOSk+cpzqjR+Bo8/y5+i:kKvULptjAqenFfGScQDcOSkyjsC5+i
Malware Config
Signatures
-
XLoader payload 2 IoCs
-
XLoader, MoqHao
An Android banker and info stealer.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes
-
tda.wdhg.jfou.cij1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
509KB
MD5a0cfd683ef1acf06879bb3b578ca2f1e
SHA133dfe4869ec0516d6cdce8e3b7a1ea57fff3eec0
SHA256896a5e048164efaa896f839e09d5eac6239fdfdf67c498dc47982417c14e43ab
SHA5121d1bb6fd9297e696264783ffda96df6eb786eda9aa953ad1abebf3732f767747ce89ff71f9f84fb77a8c5ac342439c0baa6702d3b34dcea4c4f9c95b3ad403d9