General

  • Target

    92e4dda98ed7aaa37d26683293cbe09e633094f40e6808e4da43813e49705da5.bin

  • Size

    283KB

  • Sample

    240225-1xqtnade99

  • MD5

    76e5df6d957d878afc186ecd5b4841e0

  • SHA1

    477c6fd8a259ec9949288d439fba6a6811a2ec67

  • SHA256

    92e4dda98ed7aaa37d26683293cbe09e633094f40e6808e4da43813e49705da5

  • SHA512

    2bc3e96a318532d2e961a31951dff92582fdbe63c967445201325bf87cb4684878c19048937639a0bc534f32e685340ed82f47c57840b1e4eaad7d8ae8161ca8

  • SSDEEP

    6144:Q+mkfC8OoZftPbEcqHFVvvYA/C8l2RNiWBxnf7Ucpzq9R+Bo8/y5V:Pm6LDZftwcivfa8lEiQRc9sC5V

Malware Config

Targets

    • Target

      92e4dda98ed7aaa37d26683293cbe09e633094f40e6808e4da43813e49705da5.bin

    • Size

      283KB

    • MD5

      76e5df6d957d878afc186ecd5b4841e0

    • SHA1

      477c6fd8a259ec9949288d439fba6a6811a2ec67

    • SHA256

      92e4dda98ed7aaa37d26683293cbe09e633094f40e6808e4da43813e49705da5

    • SHA512

      2bc3e96a318532d2e961a31951dff92582fdbe63c967445201325bf87cb4684878c19048937639a0bc534f32e685340ed82f47c57840b1e4eaad7d8ae8161ca8

    • SSDEEP

      6144:Q+mkfC8OoZftPbEcqHFVvvYA/C8l2RNiWBxnf7Ucpzq9R+Bo8/y5V:Pm6LDZftwcivfa8lEiQRc9sC5V

    • XLoader payload

    • XLoader, MoqHao

      An Android banker and info stealer.

    • Removes its main activity from the application launcher

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads the content of the MMS message.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks