General
-
Target
Chrome_up1732156036129.apk
-
Size
260KB
-
Sample
241121-mvd57awkep
-
MD5
5f94eb0c15f0b754617892ee18d5d9a9
-
SHA1
a52189767ebbb10ec4d156e0a8690042996db632
-
SHA256
958c51388770404cf1ddb320263125b5694a0691c5c6755e21ea61db968bef63
-
SHA512
a0d2faf81ccb18a3333d7284e792ff9cc8273aec5ef01d5c4979c1db989dddb192aff1a8185b5d94372c54706a93cc70d0df42560ad4a2c94b4cfa0fc390f471
-
SSDEEP
6144:YeRFYEjMHI3Jh67jcbyRQKLuikTPm4C4mYGeeCYvMuj:yEjMIwjcbubYTO4ozvMc
Static task
static1
Behavioral task
behavioral1
Sample
Chrome_up1732156036129.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
Chrome_up1732156036129.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
Chrome_up1732156036129.apk
Resource
android-33-x64-arm64-20240624-en
Malware Config
Extracted
xloader_apk
http://91.204.226.54:28899
Targets
-
-
Target
Chrome_up1732156036129.apk
-
Size
260KB
-
MD5
5f94eb0c15f0b754617892ee18d5d9a9
-
SHA1
a52189767ebbb10ec4d156e0a8690042996db632
-
SHA256
958c51388770404cf1ddb320263125b5694a0691c5c6755e21ea61db968bef63
-
SHA512
a0d2faf81ccb18a3333d7284e792ff9cc8273aec5ef01d5c4979c1db989dddb192aff1a8185b5d94372c54706a93cc70d0df42560ad4a2c94b4cfa0fc390f471
-
SSDEEP
6144:YeRFYEjMHI3Jh67jcbyRQKLuikTPm4C4mYGeeCYvMuj:yEjMIwjcbubYTO4ozvMc
-
XLoader payload
-
Xloader_apk family
-
Checks if the Android device is rooted.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the MMS message.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Reads information about phone network operator.
-
Requests accessing notifications (often used to intercept notifications before users become aware).
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
2Suppress Application Icon
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1Discovery
Software Discovery
1Security Software Discovery
1System Information Discovery
2System Network Configuration Discovery
2