General

  • Target

    28a6108f3a22e264f889579ee2f68792c28c5381d0799b0d80a1f0e019bad53c.bin

  • Size

    212KB

  • MD5

    0c3d26d40be92f651b651c9eed1a0b1a

  • SHA1

    0d64a0dcfd99d15d97a8e27c13f61bf0c032e073

  • SHA256

    28a6108f3a22e264f889579ee2f68792c28c5381d0799b0d80a1f0e019bad53c

  • SHA512

    e5f8321d4ba9364eef41d3d70869c36093c4570f1a765d6292b5f33c770634eea3e1513fa3e9d77c8f15c2d99af4eeaf270857245c59ab58f9f038b8a2fbfc56

  • SSDEEP

    6144:2tQNbRX2SwCqCX24El0BQgo2mL7yJbkT1at1j:2+zX2+qCREo1o2w7yJIA

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 28a6108f3a22e264f889579ee2f68792c28c5381d0799b0d80a1f0e019bad53c.bin
    .apk android arch:arm

    qmdgene.utrppcket.atlldk.akvicbvu

    qfv7.kdjhono


Android Permissions

28a6108f3a22e264f889579ee2f68792c28c5381d0799b0d80a1f0e019bad53c.bin

Permissions

android.stneb.ggvv.fihyjalf

android.fnmk.tgyx.rztse

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS