Analysis
-
max time kernel
6864s -
platform
android_x86 -
resource
android-x86-arm -
submitted
01-08-2021 06:28
Static task
static1
Behavioral task
behavioral1
Sample
62704_Video_Oynatıcı.apk
Resource
android-x86-arm
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
62704_Video_Oynatıcı.apk
Resource
android-x64-arm64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
62704_Video_Oynatıcı.apk
Resource
android-x64
0 signatures
0 seconds
General
-
Target
62704_Video_Oynatıcı.apk
-
Size
2.6MB
-
MD5
52701a605c761762de193f011a141996
-
SHA1
7290ab6e0185920dcdc06aa9e20a85463d6ee8fe
-
SHA256
62c4f65a03143e0e6f2993048b84912b8191979f10fc9a8977848ab2eca21c3d
-
SHA512
a906b43efa4f2a25086172b0d3216db2d0fc277fafd438b736927406cd6e22e8ec9b6db05cf5993d5c553adced0097191528c2befc636396568d4e34074d0c86
Score
10/10
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.wxsegdyb.bhdvikk/code_cache/secondary-dexes/base.apk.classes1.zip 5092 /system/bin/dex2oat /data/user/0/com.wxsegdyb.bhdvikk/code_cache/secondary-dexes/base.apk.classes1.zip 5064 com.wxsegdyb.bhdvikk -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.wxsegdyb.bhdvikk -
Uses reflection 1 IoCs
description pid Process Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE 5064 com.wxsegdyb.bhdvikk