xloader_apk | b42ba0044279182a62bd67a8626516ecc78eec394007707fba3ae3456584affd | Triage

Sharing

General

Target

b42ba0044279182a62bd67a8626516ecc78eec394007707fba3ae3456584affd.bin
Size

212KB
Sample

241022-1433kayglr
MD5

6ccab22764d1587a736fa868ae40fd4c
SHA1

0db5928e789f655cf3740975a53c96e77aaad63e
SHA256

b42ba0044279182a62bd67a8626516ecc78eec394007707fba3ae3456584affd
SHA512

c51ae78736cdae5e0ecd7522f311dc93239d3c1792002ef340c713624e81a2f1d54cd5059e5eb8657f2c30b62bbb00707f126cca9a59e312c700efc9ebc9b88b
SSDEEP

3072:fHiV//AapbWfPP5d7G3ASs7Dcgh9J3hH21Bvu4MiUDxML0vpN0GoY0UX5LcnV:fUnAaRKPniQpXc+9HW1puiU9MgPVC

Score

10^/10

xloader_apk android banker evasion infostealer trojan

Malware Config

Targets

- Target
  
  b42ba0044279182a62bd67a8626516ecc78eec394007707fba3ae3456584affd.bin
- Size
  
  212KB
- MD5
  
  6ccab22764d1587a736fa868ae40fd4c
- SHA1
  
  0db5928e789f655cf3740975a53c96e77aaad63e
- SHA256
  
  b42ba0044279182a62bd67a8626516ecc78eec394007707fba3ae3456584affd
- SHA512
  
  c51ae78736cdae5e0ecd7522f311dc93239d3c1792002ef340c713624e81a2f1d54cd5059e5eb8657f2c30b62bbb00707f126cca9a59e312c700efc9ebc9b88b
- SSDEEP
  
  3072:fHiV//AapbWfPP5d7G3ASs7Dcgh9J3hH21Bvu4MiUDxML0vpN0GoY0UX5LcnV:fUnAaRKPniQpXc+9HW1puiU9MgPVC
Score

10^/10

xloader_apk banker evasion infostealer trojan
- XLoader payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xloader_apkbankerevasioninfostealertrojan