xloader_apk | 7c2ce095afd68f2a6c4ac11b495f3e6c648d10d0af1379392b1e07a8c2e5bbcd | Triage

Submit
Reports

Overview

overview

Static

static

6

d57dea7195...0c.apk

android-9-x86

Sharing

General

Target

d57dea71951a50c509b5ac98b3296f0c
Size

441KB
Sample

240319-htchrach83
MD5

d57dea71951a50c509b5ac98b3296f0c
SHA1

7e2f4d63dbf51491058f0040ef64477ee521d686
SHA256

7c2ce095afd68f2a6c4ac11b495f3e6c648d10d0af1379392b1e07a8c2e5bbcd
SHA512

850fa44c229c055ccef4be20c60647c5314af6eaa47bf64de01be0ae7b05609cdaad03d8363feaa732c12ecf484dfd9fcb632cbaccaa0d9722202e25392bed40
SSDEEP

12288:maEQueADcM5xAVzIJcX6jyybMQwwvruIOh11J:maipDcDzIBuQwMOTz

Score

10^/10

xloader_apk android banker collection evasion infostealer stealth trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d57dea71951a50c509b5ac98b3296f0c.apk

Resource

android-x86-arm-20240221-en

xloader_apk banker collection evasion infostealer stealth trojan

android-9-x86

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  d57dea71951a50c509b5ac98b3296f0c
- Size
  
  441KB
- MD5
  
  d57dea71951a50c509b5ac98b3296f0c
- SHA1
  
  7e2f4d63dbf51491058f0040ef64477ee521d686
- SHA256
  
  7c2ce095afd68f2a6c4ac11b495f3e6c648d10d0af1379392b1e07a8c2e5bbcd
- SHA512
  
  850fa44c229c055ccef4be20c60647c5314af6eaa47bf64de01be0ae7b05609cdaad03d8363feaa732c12ecf484dfd9fcb632cbaccaa0d9722202e25392bed40
- SSDEEP
  
  12288:maEQueADcM5xAVzIJcX6jyybMQwwvruIOh11J:maipDcDzIBuQwMOTz
Score

10^/10

xloader_apk banker collection evasion infostealer stealth trojan
- XLoader payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Removes its main activity from the application launcher
  stealth trojan evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Reads the content of the MMS message.
  collection
- Acquires the wake lock
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankercollectionevasioninfostealerstealthtrojan

© 2018-2024

Terms | Privacy