Analysis
- max time kernel
149s - max time network
155s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
22/01/2024, 02:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6e712bd5e165a8a470c9918b474db1b1.apk
Resource
android-x86-arm-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e712bd5e165a8a470c9918b474db1b1.apk
Resource
android-x64-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
6e712bd5e165a8a470c9918b474db1b1.apk
Resource
android-x64-arm64-20231215-en
6 signatures
150 seconds
General
- Target 6e712bd5e165a8a470c9918b474db1b1.apk
- Size 292KB
- Sample240122-clzqesebar
- SHA256 7507db30a5b6c277e3557a2d9397fd5ba5c309cd8260a68224d34b0787b8e69e
- MD5 6e712bd5e165a8a470c9918b474db1b1
- SHA1 d2dd0b438a9686db101cfa6dd106cd140c951dd5
- SHA512 704f34fa77723a826695a6a80bfa625243c8dc1e0ead1f5e54659112bb4d6f4c3697b55fa60f4c9cee7f20482bdf208a993df9fa53afb38859ab2dd10711dcec
- SSDEEP 6144:wPzm4AchDF85g9bIg/YQ4nlo7baw7On+Myugow1vb7OTQb:szm43pFyobH8O7mw8yj5v/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- XLoader payload 1 IoCs
resource yara_rule behavioral2/files/fstream-1.dat family_xloader_apk2 - XLoader, MoqHao
An Android banker and info stealer.
-
pid Process 4921 com.tkis.kubs - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.tkis.kubs/files/dex 4921 com.tkis.kubs /data/user/0/com.tkis.kubs/files/dex 4921 com.tkis.kubs - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.tkis.kubs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.tkis.kubs/files/dex
- Size 482KB
- SHA256 bc2b4b4143615f87f5604b494ceae969b04051cc995e4d371fdeb3966b713344
- MD5 596227101999c7b6a2259f1bdd57997a
- SHA1 81bc0f0e305bebfac09c06784f5ecf7a26b05f37
- SHA512 dbb13d983c7231acd5fff598584ac1206e362a5a2d90cedc51184208d7d119f077c8bf1885caa11d90b456a3ba73bd9b2ee99694d328e313f144047b7ba0c7ad
- SSDEEP 12288:Ivlq5LtFKCG5xpMbis1rHcmWMWMA8m/CbEcaLS8m/CbEcaLChwFpJv:klq5LtFKCG5xpMb9Ru58m/CbEcaLS8md
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.tkis.kubs/files/oat/dex.cur.prof
- Size 787B
- SHA256 263404bf1ccb50ba1d4b7672b2a5268a1a3edd0961c58255d4be28a3adfb65f1
- MD5 8fb620dd35cc74590e916dca6a732fac
- SHA1 d0eea0cdeeba5e23a9caed440a0441d3f4fe31fc
- SHA512 40802889af766153361ab8c14fc54fa32707e417c32714493ab0aa0e81a5708b0c520b062f1b3b0eebd59c4156136d7fb349cfec8c16527c2eff70583ee6350f
- MD5 SHA1 SHA512