Analysis

  • max time kernel
    438220s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    06-08-2021 06:18

General

  • Target

    90152_Video_Oynatıcı.apk

  • Size

    3.1MB

  • MD5

    6e4016cb79bcd119270acf542712b2fb

  • SHA1

    7b75c91b636d63ea009d94acce954931f4d863fe

  • SHA256

    676e369114e1052db252e5a93b76ae3cbe86e6afefbc0ca41810d2be983890ac

  • SHA512

    4f3c7dcf227f1a942ed74a8070f3580248b9b1a946b5d214d3c5ed81aa41d1d38f48b6a9c0077170950d4a4a22d55e91ee60c949851ee16617cb0de1f67d35af

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Uses reflection 1 IoCs

Processes

  • com.qyiqeqhd.gbdvmbz
    1⤵
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    • Uses reflection
    PID:4793
    • com.qyiqeqhd.gbdvmbz
      2⤵
        PID:4823
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:4823

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/MultiDex.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/base.apk.classes1.zip

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/base.apk.classes1.zip

      MD5

      69f3033a237dfb152789ae6800a583b0

      SHA1

      6e68a4c6c1842f0958953359bbb00e970a9b7760

      SHA256

      8213ad8f2acaf48efb3a51208771c334b31c89927d39aa9c04f51e94b6c7bcc4

      SHA512

      373dde13075a418becbd861ff345c0d69d8e9bdd4dd268b3281fa059f9e2baad68bdac437fd76e4298592258af9e433886eb365d33d39da83c2cce806b8e7a6e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/base.apk.classes1.zip.x86.flock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/oat/x86/base.apk.classes1.odex

      MD5

      d4a0f3ab454506aba588f2e591d0c980

      SHA1

      0749dd38d4ddc9c1f280d37b32d298eacc739403

      SHA256

      3b44b5d957b769b328138d616361c4f648b6cadc3ea846036f93267b4d7e4644

      SHA512

      99052bba638f29f4626fb83d3e37b3711d1c41cebfc65cbc297c5f2f451627466be0a3ca539f8d291bb1cfe8abdc9c7633b42b84f1435f4e86af931fd7d5b260

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/oat/x86/base.apk.classes1.vdex

      MD5

      88030a95aea9768769808fd50e3cffd3

      SHA1

      584724b0efc2826d70b52ba365a1a2e7e300a892

      SHA256

      a5116acc1b9d8673cf966226344e8c4f3f3bdcbdfc45ed63a9d172e7a73d3bb6

      SHA512

      f9016a56e88083d7e26202bc35af881e7b3669dc759bcacb3e94f3eccae80c7eb024dd7884e8a341fe9e1a1cfcb73bb88826c0f3def742ba22f233f3f66bbf26

    • /data/user/0/com.qyiqeqhd.gbdvmbz/code_cache/secondary-dexes/tmp-base.apk.classes4565609429257548715.zip

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/multidex.version.xml

      MD5

      6f5d2b7a605e049a1a70337476f7a576

      SHA1

      64e35c6a5d763785d6ac96eaef5d1ba9c176b726

      SHA256

      63c59d0a777dac38c6fbd25190a587ad07f471ddc6ba25ce79c47419086ce2ad

      SHA512

      a2c82c57ec5b7b75cd6d47fc80b40b1ad0f466d6bb8e1bfc6ba05b7dadfb1da49abd21481f68b50251c279e7a80989f06bb9bbdda8ba28198d8a9beb7c35d69f

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/pref_name_setting.xml

      MD5

      d2ea5302534ddd54f18d632233f18405

      SHA1

      71c17b634795f5831bdd8330b2bc45181a2c4f8c

      SHA256

      e79febfb507f78cf24e49d237ca406d1baec668a4514186cb0292f3f1febe77b

      SHA512

      a96c7909cc63b925e334e454a8ba2fa030b298464da8345e4c098669b57c651848d0d59d39f78953553332a5be58e8228abcb5dfae07530da3fba704217c978a

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/pref_name_setting.xml

      MD5

      8e2569343c3bc1d3a312a7bd9803cdb0

      SHA1

      468df63447bbb09412c0b61c3a329b2ccb053ab4

      SHA256

      fc3c332bff155ae0446d1543beff3a94445065288dfac230794c9891bd5109a3

      SHA512

      49e0772fae54d81c01111c83916dc9d692ea6dbe0f0a3e1e60f7e53afd95b5a74dd8814562527a635937eb5ad1f61e1a68ea7ae58f4eddc6249375c2fd94480d

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/pref_name_setting.xml

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/pref_name_setting.xml

      MD5

      44679378f6fc9f976293109aeb5093e6

      SHA1

      2d6e8abf1e7941fbd26fa48a5e38cf589c82adf9

      SHA256

      53515211c69d1605140b5270286604e5a819123d905a5d97a07c90f1be27cf01

      SHA512

      9e436562c0d843da0f5f66e376622453e3aae76505d3fa7b5d461111375434a9ce0b877f819f55c28c1602fcce9e08fa67a3f086f944d71f93885f3a06421751

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/pref_name_setting.xml

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/prefs30.xml

      MD5

      2703c2433242eb7df82f8725f8aded17

      SHA1

      adb4d1155aba8bc80540bf8505c67b2413ab3169

      SHA256

      bd6689dfd67939fc6a7b08bc76ce0e831559b29bf774e9e85bf6a6a6e191a505

      SHA512

      9714034f5ad7ea6d5db46221f21f76b48fd3af46e412ac78af04fd57fa419756a8212c8f6c41dcca0f524a535387d98c6b31c8dd364090f6b95c50471cfb9f89

    • /data/user/0/com.qyiqeqhd.gbdvmbz/shared_prefs/prefs30.xml

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e