Extracted

• • Target
    bad3be8f952deb74ccdbadf05f80972dc86a6b5385af72496fec443312ce4787.bin
  • Size 360KB
  • SHA256 bad3be8f952deb74ccdbadf05f80972dc86a6b5385af72496fec443312ce4787
  • MD5 5af5c599a953c15e62ad11eae060cc85
  • SHA1 a78811f3f8b91d3f25cad873c4e841a251639b67
  • SHA512 8c4a844e6d8ae2d676ae837fcfca99ecac51e49da817fc86ca54dd5f54a4eccafc06783c1896a9035d1a61684c655cc1ccc2ff3cf6f86ef5ae2195a9e23d8632
  • SSDEEP 6144:3xyW2iI3P40cNBDbLuduFPdj7L7MbzkHJK8xTvhC/XpeIZwLSUjpUll/ai:h5q3PlcNB7Z3f7izkkITvgPpegY5ml1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  xloader_apkbankerevasioninfostealerstealthtrojan

  • XLoader payload

  • XLoader, MoqHao

    An Android banker and info stealer.

    trojaninfostealerbankerxloader_apk

  • Removes its main activity from the application launcher

    stealthtrojan

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Tries to add a device administrator.

  • Acquires the wake lock

  • Reads information about phone network operator.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3