xloader_apk | 7e484bd8c420cb5a2d924506513c45599109c5329802607ece02345ad5c10456 | Triage

Submit
Reports

Overview

overview

Static

static

6

cfebafeb5c...fc.apk

android-9-x86

Sharing

General

Target

cfebafeb5c1a62c3495aed8bfda152fc
Size

440KB
Sample

240317-e2fzcsee9x
MD5

cfebafeb5c1a62c3495aed8bfda152fc
SHA1

ba4766491d7e28ca5eb1e7d57e6e372f191e0179
SHA256

7e484bd8c420cb5a2d924506513c45599109c5329802607ece02345ad5c10456
SHA512

55001d54d0c8a39dbfd640caa9f09a57006a7cd0369cf44abbd8c961f78de3f548fa14c485afbb8c27c2794e75acc5070e3c9091fd32442efaf06e4f6461606c
SSDEEP

12288:VpfpB9k1zX+w6kx+7IrXRy+kv8em/MRmb:fsGkMIw+ka/MRM

Score

10^/10

xloader_apk android banker collection evasion infostealer stealth trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cfebafeb5c1a62c3495aed8bfda152fc.apk

Resource

android-x86-arm-20240221-en

xloader_apk banker collection evasion infostealer stealth trojan

android-9-x86

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  cfebafeb5c1a62c3495aed8bfda152fc
- Size
  
  440KB
- MD5
  
  cfebafeb5c1a62c3495aed8bfda152fc
- SHA1
  
  ba4766491d7e28ca5eb1e7d57e6e372f191e0179
- SHA256
  
  7e484bd8c420cb5a2d924506513c45599109c5329802607ece02345ad5c10456
- SHA512
  
  55001d54d0c8a39dbfd640caa9f09a57006a7cd0369cf44abbd8c961f78de3f548fa14c485afbb8c27c2794e75acc5070e3c9091fd32442efaf06e4f6461606c
- SSDEEP
  
  12288:VpfpB9k1zX+w6kx+7IrXRy+kv8em/MRmb:fsGkMIw+ka/MRM
Score

10^/10

xloader_apk banker collection evasion infostealer stealth trojan
- XLoader payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Removes its main activity from the application launcher
  stealth trojan evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Reads the content of the MMS message.
  collection
- Acquires the wake lock
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankercollectionevasioninfostealerstealthtrojan

© 2018-2024

Terms | Privacy