xloader_apk | 06e2cfe8d84bd3ef0738530459247439786e5725800253f515db996dd1ebb0a3 | Triage

Sharing

General

Target

06e2cfe8d84bd3ef0738530459247439786e5725800253f515db996dd1ebb0a3.bin
Size

212KB
Sample

241105-13xjdszhkk
MD5

084523fbca51df36d483ac724e2f0b86
SHA1

b1542d60ef0356aef799801bea16a801c71695cb
SHA256

06e2cfe8d84bd3ef0738530459247439786e5725800253f515db996dd1ebb0a3
SHA512

2acee37c95775356f0796e2187b3de242567fd636a711480e545e6ad2bb85e46f4035ddd3223252689226785880311ba79937be0fcade7261ab2297de512a8d2
SSDEEP

3072:sEz31OG5UuTSpKmJ+P9KJpERIJvSYBETVmdFVIobpwGwAfvsIMiJgcE5oKwHqsmQ:sKcG5jVGERIJv3EsHpw/Aeipl3zD/NL

Score

10^/10

xloader_apk android banker evasion infostealer trojan

Malware Config

Targets

- Target
  
  06e2cfe8d84bd3ef0738530459247439786e5725800253f515db996dd1ebb0a3.bin
- Size
  
  212KB
- MD5
  
  084523fbca51df36d483ac724e2f0b86
- SHA1
  
  b1542d60ef0356aef799801bea16a801c71695cb
- SHA256
  
  06e2cfe8d84bd3ef0738530459247439786e5725800253f515db996dd1ebb0a3
- SHA512
  
  2acee37c95775356f0796e2187b3de242567fd636a711480e545e6ad2bb85e46f4035ddd3223252689226785880311ba79937be0fcade7261ab2297de512a8d2
- SSDEEP
  
  3072:sEz31OG5UuTSpKmJ+P9KJpERIJvSYBETVmdFVIobpwGwAfvsIMiJgcE5oKwHqsmQ:sKcG5jVGERIJv3EsHpw/Aeipl3zD/NL
Score

10^/10

xloader_apk banker evasion infostealer trojan
- XLoader payload
- XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Xloader_apk family
  xloader_apk
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Checks the presence of a debugger
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xloader_apkbankerevasioninfostealertrojan