xloader_apk | b1c4534a12da1786a0f8bafe2b44bb26974f7a9f25368cfd805520b1fadea1f3

General

Target
yewzxowkrg.apk
Size 3.7MB
Sample260710-klnbdsf17q
SHA256 b1c4534a12da1786a0f8bafe2b44bb26974f7a9f25368cfd805520b1fadea1f3
MD5 8abcb86f66f5587c34cb81fe93e62363
SHA1 ef71df478da9bcb27c9314365defeb6eea48cef1
SHA512 48276a81d950c75f96b6ac1b24733405a2f556247eebf0b065c6a53bafc433f97bb54401d3c6723935a4ffb899c32a22f2233e2e1dd1620b830d1e943308f5ea
SSDEEP 49152:EeF2k+/ni8HdP8E/iNWF6yyBgC4vO1G0I4uIRcy9eMK/0RzaNZb+3rAw9See77j/:+PdP8E/iNBgfwZeJ01aNZb+b+7Jx
TLSH
T13306CF4A7681C96FDECD02F1ABB24B2A77312D0BED9ADB02F7098C5C5B052D71657E80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  yewzxowkrg.apk
- Size 3.7MB
- SHA256 b1c4534a12da1786a0f8bafe2b44bb26974f7a9f25368cfd805520b1fadea1f3
- MD5 8abcb86f66f5587c34cb81fe93e62363
- SHA1 ef71df478da9bcb27c9314365defeb6eea48cef1
- SHA512 48276a81d950c75f96b6ac1b24733405a2f556247eebf0b065c6a53bafc433f97bb54401d3c6723935a4ffb899c32a22f2233e2e1dd1620b830d1e943308f5ea
- SSDEEP 49152:EeF2k+/ni8HdP8E/iNWF6yyBgC4vO1G0I4uIRcy9eMK/0RzaNZb+3rAw9See77j/:+PdP8E/iNBgfwZeJ01aNZb+b+7Jx
- TLSH
  T13306CF4A7681C96FDECD02F1ABB24B2A77312D0BED9ADB02F7098C5C5B052D71657E80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker collection defense_evasion discovery xloader_apk impact infostealer trojan
- Family: XLoader, MoqHao
  An Android banker and info stealer.
  trojan infostealer banker xloader_apk
- Checks if the Android device is rooted.
  defense_evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads the content of the MMS message.
  collection
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1