General

  • Target
    aa31759d866bb4d01bea7f860ae63b4d8d12f9771393b081c4fc1effb17671a0
  • Size 278KB
  • Sample231220-ngvfpaged4
  • SHA256 aa31759d866bb4d01bea7f860ae63b4d8d12f9771393b081c4fc1effb17671a0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      aa31759d866bb4d01bea7f860ae63b4d8d12f9771393b081c4fc1effb17671a0
    • Size 278KB
    • SHA256 aa31759d866bb4d01bea7f860ae63b4d8d12f9771393b081c4fc1effb17671a0
    • MD5 SHA1 SHA512 SSDEEP
    • XLoader payload

    • XLoader, MoqHao

      An Android banker and info stealer.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks