General
-
Target
380f590ff59e2943b504bb9b220090db1f766d8d98c5966af7c3887eb7d8c916.bin
-
Size
208KB
-
Sample
240430-1xrqysaf26
-
MD5
eb70bd2eeebca75bbf58fc27e73d5fd8
-
SHA1
bfe562a2021f810bf05897678f38445d477d2ec1
-
SHA256
380f590ff59e2943b504bb9b220090db1f766d8d98c5966af7c3887eb7d8c916
-
SHA512
d9829d4baca43a1d7e924fc0c7703d2d6df5c54dce93986a4f62a8cb898a7ca17fa1229b7efd890b22b88a8a8ea33229948f83968197cfb32925c77b6c0f6440
-
SSDEEP
6144:9RtatrjXfEz0sx4pbxFkHis73yKNcBflHPGcZCc:rtatrbTss0isrCVdecZCc
Static task
static1
Behavioral task
behavioral1
Sample
380f590ff59e2943b504bb9b220090db1f766d8d98c5966af7c3887eb7d8c916.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
xloader_apk
http://91.204.227.39:28844
Targets
-
-
Target
380f590ff59e2943b504bb9b220090db1f766d8d98c5966af7c3887eb7d8c916.bin
-
Size
208KB
-
MD5
eb70bd2eeebca75bbf58fc27e73d5fd8
-
SHA1
bfe562a2021f810bf05897678f38445d477d2ec1
-
SHA256
380f590ff59e2943b504bb9b220090db1f766d8d98c5966af7c3887eb7d8c916
-
SHA512
d9829d4baca43a1d7e924fc0c7703d2d6df5c54dce93986a4f62a8cb898a7ca17fa1229b7efd890b22b88a8a8ea33229948f83968197cfb32925c77b6c0f6440
-
SSDEEP
6144:9RtatrjXfEz0sx4pbxFkHis73yKNcBflHPGcZCc:rtatrbTss0isrCVdecZCc
-
XLoader payload
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the MMS message.
-
Acquires the wake lock
-