xloader_apk | 9f2aa63acc278a2d9f82d4536c2c9d5193d0e1a5ae92388d2ca891bba09c1377 | Triage

Submit
Reports

Overview

overview

Static

static

6

cf5b114ae0...e7.apk

android-9-x86

Sharing

General

Target

cf5b114ae032a4b25e388d2dfc32b3e7
Size

445KB
Sample

240316-3jzkrafa91
MD5

cf5b114ae032a4b25e388d2dfc32b3e7
SHA1

120020a30a124af03ec0aa9d96ba01a70442744a
SHA256

9f2aa63acc278a2d9f82d4536c2c9d5193d0e1a5ae92388d2ca891bba09c1377
SHA512

390aec64457793431ab046e992cc333bb5b25b6891d69491d46d58676cf2ff41f3e3a4080311136a73e7c2a8a910ead8fddae795359c0dfaa92dc9943e2a693a
SSDEEP

12288:WRxe7tfIt4vzVUD7DAEXqyqQnSMey7SQZyXzF:WROvzyD7Duy5g8kjF

Score

10^/10

xloader_apk android banker collection discovery evasion infostealer stealth trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cf5b114ae032a4b25e388d2dfc32b3e7.apk

Resource

android-x86-arm-20240221-en

xloader_apk banker collection discovery evasion infostealer stealth trojan

android-9-x86

9 signatures

150 seconds

Malware Config

Extracted

Family

xloader_apk

C2

http://91.204.227.39:28844

DES_key

Targets

- Target
  
  cf5b114ae032a4b25e388d2dfc32b3e7
- Size
  
  445KB
- MD5
  
  cf5b114ae032a4b25e388d2dfc32b3e7
- SHA1
  
  120020a30a124af03ec0aa9d96ba01a70442744a
- SHA256
  
  9f2aa63acc278a2d9f82d4536c2c9d5193d0e1a5ae92388d2ca891bba09c1377
- SHA512
  
  390aec64457793431ab046e992cc333bb5b25b6891d69491d46d58676cf2ff41f3e3a4080311136a73e7c2a8a910ead8fddae795359c0dfaa92dc9943e2a693a
- SSDEEP
  
  12288:WRxe7tfIt4vzVUD7DAEXqyqQnSMey7SQZyXzF:WROvzyD7Duy5g8kjF
Score

10^/10

xloader_apk banker collection discovery evasion infostealer stealth trojan
- XLoader payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Removes its main activity from the application launcher
  stealth trojan evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Reads the contacts stored on the device.
  collection
- Reads the content of the MMS message.
  collection
- Acquires the wake lock
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankercollectiondiscoveryevasioninfostealerstealthtrojan

© 2018-2024

Terms | Privacy