hydra | e3d68b6bf3c6a839e79cc7141a71d59b85858dd3e65764ec151c7cd849fd8080

Analysis

max time kernel
368185s
max time network
40s
platform
android_x64
resource
android-x64
submitted
05-08-2021 10:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

39105_Video_Oynatıcı.apk
Size

2.6MB
MD5

8ab0e4eaf8dfac431a81338824426252
SHA1

a238d35b7478b5432d5ae661caf0a87aecf9e133
SHA256

e3d68b6bf3c6a839e79cc7141a71d59b85858dd3e65764ec151c7cd849fd8080
SHA512

8b0481f6e01fa02c03b10160f2ce6e2abbb051c346048c7e99505053da2c19cc1b55fadc00820c6cf977008d6503c0b149e200ef9683a1ef6077011ca27f58e6

Score

10^/10

hydra banker infostealer obfuscation trojan

Malware Config

Extracted

Family

hydra

http://greysondowling458.xyz

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.psankkqa.lfugzqt

ioc pid process

/data/user/0/com.psankkqa.lfugzqt/code_cache/secondary-dexes/base.apk.classes1.zip 3654 com.psankkqa.lfugzqt
Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.psankkqa.lfugzqt

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.psankkqa.lfugzqt

ioc	pid	process
/data/user/0/com.psankkqa.lfugzqt/code_cache/secondary-dexes/base.apk.classes1.zip	3654	com.psankkqa.lfugzqt

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.psankkqa.lfugzqt

Uses reflection 3 IoCs

obfuscation

Processes:

com.psankkqa.lfugzqt

description	pid	process
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE	3654	com.psankkqa.lfugzqt
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3654	com.psankkqa.lfugzqt
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3654	com.psankkqa.lfugzqt

com.psankkqa.lfugzqt
1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Uses reflection
PID:3654

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.psankkqa.lfugzqt/code_cache/secondary-dexes/MultiDex.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.psankkqa.lfugzqt/code_cache/secondary-dexes/base.apk.classes1.zip
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.psankkqa.lfugzqt/code_cache/secondary-dexes/tmp-base.apk.classes7428847126627389077.zip
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/multidex.version.xml
MD5
faf5f958c0e7be5529032137c8549765

SHA1
f99e615c32646aad4b41539d9c7683f6dcd8bb55

SHA256
97334ac9f042071aba0bf7325f3ba706f40598573c7c658584e8919d96f704ba

SHA512
75c5130ddd76e00d9067d2ce98d7ac2dba3449ccc05496397c057432d53efdf578b105641b6a9ebfc351807a384af7fcbd4a0c981b54e0942281e1a44b6b832c

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/pref_name_setting.xml
MD5
6288d77acf2f553e60daac4d7e61278d

SHA1
ee1c8909ac0ed0850e9e42bf08c931a87362bdd9

SHA256
29ac864ca0b6e4eee7e3a24282eeababf163077060d0c7affaf945f142322e49

SHA512
0a83a81458e711632ad979f409127f2af503f6f57f3451671a834c359f6d8c52701de2dc0fba1b7588bd409aa5f7e321fe4ebc708f1242f7f5c5b83aaa381901

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/pref_name_setting.xml
MD5
8e197e56e8f77987e2b59577856c4383

SHA1
9f65aece1f89d86eafccb52177be7892f79422f3

SHA256
658bf739268c3e4e2e2375bbf9c4ca31d903698c8540cb8f7ab9112680a589a5

SHA512
acbb38438c761b22a41e27b56fb7769527a5c8c95c059d2f99da1be9436557e354121c4c55027523e64382ff9fe218a0a6c060227aea3844552fa4b1d6d77bd7

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/pref_name_setting.xml
MD5
fca277c404361108fe30cda8db3ff0bb

SHA1
95b4fa55aa3f06dec90f5cdcb7e55b25d0228b51

SHA256
37bce2f58b8a708b22aa9c6288f591dfc55175f686d667fb867e4f30b5b61aab

SHA512
5538d3ea1ef2a02b50c90a8c4dc439124c73e7fb8e26025eea4978ee73de78ab9be19a6571417e0873099c6bf3990489137d5a6ad6b08b5afd0e20cc94ce66ec

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/pref_name_setting.xml
MD5
834b1c562fd5d5884ea85aeb4ed59f0c

SHA1
19c56e8bfe91a13e6a150b72d317de8738d1fe47

SHA256
137481dd67422db5e26fc66d48fa1fdb82aae7a7be365727cc4bfaf3aea97b85

SHA512
5c21775cfc46bb89f7d4a279e17c411ea964ba16f0ff28820d5a34005130bcfe522d1b3dc9a926505928c63bc259baf93e7917129e742a4a0267097dfc7b3765

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/pref_name_setting.xml
MD5
136e3ca241d27c5f654d7d27c604cd6c

SHA1
ef2f5252b300bd256119a3523d829f9d7c44ecb0

SHA256
1784666b2344754918f75dbab749c1d9cd099faca3bd6df15cd3a89bd4130d00

SHA512
be6936f3d716a6f8f6692694b62024fbeb5b1253ae037a5afff50d19dd240c27400e9896ccd1c9515e2ea32c6e37b2e864057e3125301352bb0f223c42c7763b

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/pref_name_setting.xml
MD5
f85d614a8ac722a698226e15a7967bc2

SHA1
ea3165ddf41f8e68e9f39925a4dea127776cc3d2

SHA256
183e107d5cb19e5a5981ea7fbc97f30ae61ba32a2fc424179874f2c75723ef49

SHA512
87370d4d69d3845d3038ee388b568e67a229f81d26edd441cfb2a90a821c292ae6e1608eba275d3f540551190659cb74981e6aa557dc8104b81047e38d3052a4

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/prefs30.xml
MD5
12d6ab1d27552f5788e1667ec0eb1360

SHA1
f0c1a775a55b7bb45fe65579b526cf4360c0c4d6

SHA256
52e178aa40fd1c71b3a4e8fdfb73fba744ac754430d94697f4d2aaa6823c0d18

SHA512
87eb0dba3f5fbb8801a5b8a07849c8634698d64333f77d548f4596221d2f3d7cba7288ebb0fe0b7f9357add2636b07c6e9cd24aa887dd6cce6d22a1b7e2d3d32

Download Submit
/data/user/0/com.psankkqa.lfugzqt/shared_prefs/prefs30.xml
MD5
b6e8ab9e578df49e49a2d8c311208934

SHA1
3380b6137e8ec4331b488262547efb72a619aac6

SHA256
c60680ed16146c956b1ac45c515f65f4228d793711cd599ebb41944678e96a58

SHA512
f60d44387cd84bcd4d8312f80fc64e9a94855a42ca6ed9f0ad716ba90409f94bd1f2358c8afdfe3558c5d92c2e449afabcd1885beece4eb194080c417b4b9272

Download Submit