xloader_apk | c92a7d2f90ed8bdc73a7ed3fef7bb98cc86b875a939c2b5d2b01ca6db71f98d8 | Triage

Submit
Reports

Overview

overview

Static

static

6

a7e1a12eb2...18.apk

android-9-x86

Sharing

General

Target

a7e1a12eb27b3ee2209dffa1a59f58c8_JaffaCakes118
Size

444KB
Sample

240403-1zsq2aec2t
MD5

a7e1a12eb27b3ee2209dffa1a59f58c8
SHA1

bff82146d55983003e8da6b77a5bd8eee898ed72
SHA256

c92a7d2f90ed8bdc73a7ed3fef7bb98cc86b875a939c2b5d2b01ca6db71f98d8
SHA512

bdbbfbcb8a2744066026f0718bdb961a22f6e86b52cfb9e34368bfc7b95e3f07e4755e860c82f1a743223b82b1743c23ed6693f5ef3553f2955bbe270284f1f2
SSDEEP

12288:tf51spL11E3VShd+qr1svgrruWUwSkOLreoWfT:tf5sJ1iVS/fr1ugryWUwSkOXeoWL

Score

10^/10

xloader_apk android banker collection evasion infostealer persistence stealth trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a7e1a12eb27b3ee2209dffa1a59f58c8_JaffaCakes118.apk

Resource

android-x86-arm-20240221-en

xloader_apk banker collection evasion infostealer persistence stealth trojan

android-9-x86

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  a7e1a12eb27b3ee2209dffa1a59f58c8_JaffaCakes118
- Size
  
  444KB
- MD5
  
  a7e1a12eb27b3ee2209dffa1a59f58c8
- SHA1
  
  bff82146d55983003e8da6b77a5bd8eee898ed72
- SHA256
  
  c92a7d2f90ed8bdc73a7ed3fef7bb98cc86b875a939c2b5d2b01ca6db71f98d8
- SHA512
  
  bdbbfbcb8a2744066026f0718bdb961a22f6e86b52cfb9e34368bfc7b95e3f07e4755e860c82f1a743223b82b1743c23ed6693f5ef3553f2955bbe270284f1f2
- SSDEEP
  
  12288:tf51spL11E3VShd+qr1svgrruWUwSkOLreoWfT:tf5sJ1iVS/fr1ugryWUwSkOXeoWL
Score

10^/10

xloader_apk banker collection evasion infostealer persistence stealth trojan
- XLoader payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Removes its main activity from the application launcher
  stealth trojan evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Reads the content of the MMS message.
  collection
- Acquires the wake lock
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

xloader_apkbankercollectionevasioninfostealerpersistencestealthtrojan

© 2018-2024

Terms | Privacy