hydra | 90afe99519b428fb7b39843af48838d70d997568609417e9d242858d3eceace8

Analysis

max time kernel
587474s
max time network
39s
platform
android_x64
resource
android-x64
submitted
07-08-2021 23:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

54738_Video_Oynatıcı.apk
Size

3.1MB
MD5

af830c008d42babdcdfd6520198e2ba7
SHA1

e92981cc645439f71f2b5892d940da1b6b84744f
SHA256

90afe99519b428fb7b39843af48838d70d997568609417e9d242858d3eceace8
SHA512

2b0b8eac9b9601e6e3f9280aaf47407d6a7ce0599dbf90a9df12ff5353c0f6cc5a6760ae357ddedd4bed4c6ffe82161bd6011b0a3553e3a354f70dd44d5e86df

Score

10^/10

hydra banker infostealer obfuscation trojan

Malware Config

Extracted

Family

hydra

http://courteneyguerrero584.xyz

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.dezjpspf.pjwtyzt

ioc pid process

/data/user/0/com.dezjpspf.pjwtyzt/code_cache/secondary-dexes/base.apk.classes1.zip 3710 com.dezjpspf.pjwtyzt
Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.dezjpspf.pjwtyzt

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.dezjpspf.pjwtyzt

ioc	pid	process
/data/user/0/com.dezjpspf.pjwtyzt/code_cache/secondary-dexes/base.apk.classes1.zip	3710	com.dezjpspf.pjwtyzt

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.dezjpspf.pjwtyzt

Uses reflection 3 IoCs

obfuscation

Processes:

com.dezjpspf.pjwtyzt

description	pid	process
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE	3710	com.dezjpspf.pjwtyzt
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3710	com.dezjpspf.pjwtyzt
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3710	com.dezjpspf.pjwtyzt

com.dezjpspf.pjwtyzt
1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Uses reflection
PID:3710

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.dezjpspf.pjwtyzt/code_cache/secondary-dexes/MultiDex.lock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/code_cache/secondary-dexes/base.apk.classes1.zip

MD5
5a9139405da743ec742cc990261f1e72

SHA1
e67fd6d3e1f443da5a9ab37ed07c82f33e11c292

SHA256
b26b9eba1bf19407e1979eebce69142379156882d67fae6229c38a690fc2d925

SHA512
faa04e4d02b6a13df77ead13f1fec7561905d9a9c9c5195d8beac3434035643d3ea2af685e216418d393dfeb188ef8faa26c5010fb9d95e5f99f5927a057871c

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/code_cache/secondary-dexes/tmp-base.apk.classes8285300740556616403.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/shared_prefs/multidex.version.xml

MD5
c49beaa8088b4a27d030523bdf77163f

SHA1
05c6127fbd514e5d264949a9ff6d26f181dbd16f

SHA256
62b99926988d5f703011513daf9203bfb4987fadcac119750162653c320acb36

SHA512
191a4996c865b10553d81a1855fb9b2f885bea9fcdf49e9cdcc41e4220aed550b27a27716f4173d760aca63158b44acf1d0e656ec6296103c4a94f8804275f05

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/shared_prefs/pref_name_setting.xml

MD5
3082f8be05d82233a6151a5be40498f6

SHA1
c3ab95afed279f3c744a2f099c8cbe342baeae38

SHA256
b713605cb696549a98436d536e2e7b7afd658f284fff9d70d688f66943d23b49

SHA512
b41b3ea705c33223ef8c91574708890105394db383305ad33c889e2b848a01926a87c4719101418def8737337f3f7d0f11384439df74e5d24199ea701be6c2e2

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/shared_prefs/pref_name_setting.xml

MD5
97e636442483674ffe0811f90d17ccc8

SHA1
28712dbe6b914af94ea3a9da803e6e10816b6be1

SHA256
5dd174f56feda2af010e8d8f1b2f54bce6494153537eee4d4f22b9b8b151b1d7

SHA512
354d62c16de95752459130cf914e638b7de836d66d4c7e88c86af6338938eb579fc4ba7ab328545b791ee00d246a7b27cd8b9a71d1cb2f810196a83d86f8f848

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/shared_prefs/pref_name_setting.xml

MD5
2e4de87b972f6ec8b29e1fad97f4b1f1

SHA1
86a0a41a394a40e06cf79f900684c223e720dd20

SHA256
d5e0206d5b8383687b2e2abf6ee0204829e8b1ab3a8ff39f5082bbba193df3bc

SHA512
d6f1172ad6f8306ae7e9038cda24fc7b0d024a3fb112a4876bf164f257b3c5a4108ad68d8ffb110e41d15d5d192f0dc56241e18706729a3151be3fc71021b71c

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/shared_prefs/pref_name_setting.xml

MD5
8468371392994585464fd14fe7f5e519

SHA1
d2c920a0ce4ab88ca062d6632d4c1f299bac9c55

SHA256
0d9fa9750e8dea2aa22c81d9dc65fa2afe3ee96d0bed9bc3e4decfb4ca6242ea

SHA512
5719f33fead02d2d596cb730227cafcfcb08e43e959b83a7cfb5e584ef2a6058fb1f33dc36eb0c9a9c92cb4e32009d7fcf645b268eefb27054ce2dd09889892c

Download Submit
/data/user/0/com.dezjpspf.pjwtyzt/shared_prefs/prefs30.xml

MD5
12d6ab1d27552f5788e1667ec0eb1360

SHA1
f0c1a775a55b7bb45fe65579b526cf4360c0c4d6

SHA256
52e178aa40fd1c71b3a4e8fdfb73fba744ac754430d94697f4d2aaa6823c0d18

SHA512
87eb0dba3f5fbb8801a5b8a07849c8634698d64333f77d548f4596221d2f3d7cba7288ebb0fe0b7f9357add2636b07c6e9cd24aa887dd6cce6d22a1b7e2d3d32

Download Submit