General
-
Target
55f500d4aed9e12dedb115967de39082f80a8b869f372bc6ec84cc15b35475ae.bin
-
Size
412KB
-
Sample
240629-1yxctsxdlc
-
MD5
e512f3715d09e8f0f4f06e22d7e53bc7
-
SHA1
341f58fd58b642d070bbeca93d12b2dfeef05ad0
-
SHA256
55f500d4aed9e12dedb115967de39082f80a8b869f372bc6ec84cc15b35475ae
-
SHA512
4a38b662ae1b20f2648954b74f97abb22a857ca99f01257c8e409749a98407bf07f4f760bfe96a280468a41e738a14996f7846eaedfa54e70ab471176a9932d6
-
SSDEEP
6144:b5cyQDz3a12UH/aiNBkcnOxH2R30vUEbObpm8jYJAwuFm23Jrn8pBLnYkEG:KDNUHiiQDhu0vUEbqmEYxqjZgpZnhB
Static task
static1
Behavioral task
behavioral1
Sample
55f500d4aed9e12dedb115967de39082f80a8b869f372bc6ec84cc15b35475ae.apk
Resource
android-x86-arm-20240624-en
Malware Config
Extracted
xloader_apk
http://91.204.227.50:28899
Targets
-
-
Target
55f500d4aed9e12dedb115967de39082f80a8b869f372bc6ec84cc15b35475ae.bin
-
Size
412KB
-
MD5
e512f3715d09e8f0f4f06e22d7e53bc7
-
SHA1
341f58fd58b642d070bbeca93d12b2dfeef05ad0
-
SHA256
55f500d4aed9e12dedb115967de39082f80a8b869f372bc6ec84cc15b35475ae
-
SHA512
4a38b662ae1b20f2648954b74f97abb22a857ca99f01257c8e409749a98407bf07f4f760bfe96a280468a41e738a14996f7846eaedfa54e70ab471176a9932d6
-
SSDEEP
6144:b5cyQDz3a12UH/aiNBkcnOxH2R30vUEbObpm8jYJAwuFm23Jrn8pBLnYkEG:KDNUHiiQDhu0vUEbqmEYxqjZgpZnhB
-
XLoader payload
-
Checks if the Android device is rooted.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the MMS message.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-