Analysis
-
max time kernel
2484227s -
max time network
157s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
-
submitted
20/12/2023, 10:41
General
-
Target
a4f59995e978e4b871481fe13a78cc86133b3a0e72c9493f820572cfc279e69a.apk
-
Size
278KB
-
MD5
3f3f298c4c16663894b2a6b9b496f043
-
SHA1
66c7ba1ad03080b261771d1945b2e66161ca7681
-
SHA256
a4f59995e978e4b871481fe13a78cc86133b3a0e72c9493f820572cfc279e69a
-
SHA512
6329d573c10eb969cfdffe7d654e91001d78133dd398f644b96fc42d9dfbaa352b02980ac8fed2eeca7a40e6dfcbb76b7d8cf5d2cd5e00a2215fd06535e79158
-
SSDEEP
6144:krpdy8z+WrqKlRyieeJyUgVqZ83BG5d/baGyJTzvLAoxb:krLy8z+Wrq6yfFUgf4VbaVVXAol
Malware Config
Signatures
-
XLoader payload 2 IoCs
-
XLoader, MoqHao
An Android banker and info stealer.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes
-
qj.feg.chf.ldboc1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
509KB
MD5a0cfd683ef1acf06879bb3b578ca2f1e
SHA133dfe4869ec0516d6cdce8e3b7a1ea57fff3eec0
SHA256896a5e048164efaa896f839e09d5eac6239fdfdf67c498dc47982417c14e43ab
SHA5121d1bb6fd9297e696264783ffda96df6eb786eda9aa953ad1abebf3732f767747ce89ff71f9f84fb77a8c5ac342439c0baa6702d3b34dcea4c4f9c95b3ad403d9