Extracted

• • Target

    d120bd9b73ea7cc5bff0648ef9f15116

  • Size

    445KB

  • MD5

    d120bd9b73ea7cc5bff0648ef9f15116

  • SHA1

    251ab5f8aa09497ee9e893521055a72678887cbf

  • SHA256

    ab857862a181beaabb52da98ccc504253a38ad8c1515cae5614c9243ab43a06e

  • SHA512

    9ec8bd2820e9495e83f22949225192723cf021834975dd58d71b3ea8a4b14239386efedd5cf115da19febd99c91646376c1fecd84987a1d05fdf63b2e3b6cf8e

  • SSDEEP

    12288:Dg5JKeJ5r67ru/D7DAEXqyqQnSMey7SQZya:DgzNJQ+/D7Duy5g8ka

  Score

  10^/10

  xloader_apkbankercollectiondiscoveryevasioninfostealerstealthtrojan

  • XLoader payload

  • XLoader, MoqHao

    An Android banker and info stealer.

    trojaninfostealerbankerxloader_apk

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Reads the contacts stored on the device.

    collection

  • Reads the content of the MMS message.

    collection

  • Acquires the wake lock

  • Reads information about phone network operator.

    discovery
  behavioral1