Extracted

Extracted

• • Target
    chrome (1).apk
  • Size 173.1MB
  • SHA256 d5e7462fe9c4dac5601392a6c12a252e173e3a0dcbae575ac3f10be2c32c0115
  • MD5 8c115db6994d3707e5d5c8fed61554cb
  • SHA1 6de367e65b8e16eeb845ca2e3b3338f0d478915b
  • SHA512 3326d3b30f4b48d68c09d115858fce10d610af46bd3e3905d55981d2f1703271a91ace4cbd2946fcf5ec9d20998a8d9ed5c985c4e9b042aab5d5f6a179f78e34
  • SSDEEP 3145728:dbAfEUV5LpjomGqtGcWYVdhIoc9y4P8h1NG90OCuucnHNyRF:esmjoSttCo4P8h1w60HNu
  • TLSH
    T116883307B2529863CA4E43386DFB2B9027313300AEF353977199897E6F435D5179BB8A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankercollectiondefense_evasiondiscoveryevasionxloader_apkimpactinfostealerpersistencetrojan

  • Family: XLoader, MoqHao

    An Android banker and info stealer.

    trojaninfostealerbankerxloader_apk

  • Checks if the Android device is rooted.

    defense_evasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Queries account information for other applications stored on the device

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection

  • Queries information about the current nearby Wi-Fi networks

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Reads the content of the MMS message.

    collection

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the unique device ID (IMEI, MEID, IMSI)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3