General
-
Target
a89ab7a079cdec1c42e038ae5e54dd8e36aa62d71ecf982b2c125f4df74ff0f1.bin
-
Size
440KB
-
Sample
240530-3wtv2aeh9y
-
MD5
0ace9b82e5c108a3e812360d444738a1
-
SHA1
4dd872556838d32be207026e2940a8f1fb8585de
-
SHA256
a89ab7a079cdec1c42e038ae5e54dd8e36aa62d71ecf982b2c125f4df74ff0f1
-
SHA512
883251e64174ce14f754b2c3fe2e5395e78dabb2c29b0523f985b26ea4d2228fae5b8474db87e92d785dac45c04d9fe7f279cf7e8bef1d6267c91869a1fd8603
-
SSDEEP
12288:Mh3M3kGKATD2/rQEO7ZXZjqutpp5hDTS+JyaIipuS:CMD9TqUn7ZXwutjvDO+ZIipJ
Static task
static1
Behavioral task
behavioral1
Sample
a89ab7a079cdec1c42e038ae5e54dd8e36aa62d71ecf982b2c125f4df74ff0f1.apk
Resource
android-x86-arm-20240514-en
Malware Config
Extracted
xloader_apk
http://91.204.227.39:28844
Targets
-
-
Target
a89ab7a079cdec1c42e038ae5e54dd8e36aa62d71ecf982b2c125f4df74ff0f1.bin
-
Size
440KB
-
MD5
0ace9b82e5c108a3e812360d444738a1
-
SHA1
4dd872556838d32be207026e2940a8f1fb8585de
-
SHA256
a89ab7a079cdec1c42e038ae5e54dd8e36aa62d71ecf982b2c125f4df74ff0f1
-
SHA512
883251e64174ce14f754b2c3fe2e5395e78dabb2c29b0523f985b26ea4d2228fae5b8474db87e92d785dac45c04d9fe7f279cf7e8bef1d6267c91869a1fd8603
-
SSDEEP
12288:Mh3M3kGKATD2/rQEO7ZXZjqutpp5hDTS+JyaIipuS:CMD9TqUn7ZXwutjvDO+ZIipJ
-
XLoader payload
-
Checks if the Android device is rooted.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the contacts stored on the device.
-
Reads the content of the MMS message.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-