Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    22/01/2024, 02:10

General

  • Target
    6e712bd5e165a8a470c9918b474db1b1.apk
  • Size 292KB
  • Sample240122-clzqesebar
  • SHA256 7507db30a5b6c277e3557a2d9397fd5ba5c309cd8260a68224d34b0787b8e69e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • XLoader, MoqHao

    An Android banker and info stealer.

  • Removes its main activity from the application launcher 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.tkis.kubs
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4921

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dex

        • Path /data/data/com.tkis.kubs/files/dex
        • Size 482KB
        • SHA256 bc2b4b4143615f87f5604b494ceae969b04051cc995e4d371fdeb3966b713344
        • MD5 SHA1 SHA512 SSDEEP

        dex.cur.prof

        • Path /data/data/com.tkis.kubs/files/oat/dex.cur.prof
        • Size 787B
        • SHA256 263404bf1ccb50ba1d4b7672b2a5268a1a3edd0961c58255d4be28a3adfb65f1
        • MD5 SHA1 SHA512