xloader_apk | 47d3af7ffa6df9f29c4c8e73382026a815edb42163235dfe1ff2daac882d2107

General

Target
vinjzfceet.apk
Size 3.7MB
Sample260708-jqv2csdy4l
SHA256 47d3af7ffa6df9f29c4c8e73382026a815edb42163235dfe1ff2daac882d2107
MD5 7938a40d34abef48fb45962a99630515
SHA1 7deabaa3e1b8d139f60aee24cc8a3773f421875f
SHA512 64ecaf0d8fe9253b50225c1cd5c0a1db4428ea1a3507ea45257c88df0973194ab443767ab25ca259facfa062c88eb0b3f619a06d045630390b8953b9908e37ae
SSDEEP 98304:KpVnP53dqqKRFCbV7MQPkPisrJe+SYnUUT:6LV7MQ/sr8UnUK
TLSH
T18E06AE1255810D2DC9AE0238EB560FF35FB12352FEE192876B4947B8CB5F79206F2687
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  vinjzfceet.apk
- Size 3.7MB
- SHA256 47d3af7ffa6df9f29c4c8e73382026a815edb42163235dfe1ff2daac882d2107
- MD5 7938a40d34abef48fb45962a99630515
- SHA1 7deabaa3e1b8d139f60aee24cc8a3773f421875f
- SHA512 64ecaf0d8fe9253b50225c1cd5c0a1db4428ea1a3507ea45257c88df0973194ab443767ab25ca259facfa062c88eb0b3f619a06d045630390b8953b9908e37ae
- SSDEEP 98304:KpVnP53dqqKRFCbV7MQPkPisrJe+SYnUUT:6LV7MQ/sr8UnUK
- TLSH
  T18E06AE1255810D2DC9AE0238EB560FF35FB12352FEE192876B4947B8CB5F79206F2687
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker collection defense_evasion discovery xloader_apk impact infostealer trojan
- Family: XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Checks if the Android device is rooted.
  defense_evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads the content of the MMS message.
  collection
- Acquires the wake lock
- Queries information about active data network
  discovery
behavioral1