Overview

overview

10

Static

static

8

87362_Vide...ı.apk

android_x86

10

87362_Vide...ı.apk

android_x64

10

87362_Vide...ı.apk

android_x64

10

Analysis

  • max time kernel
    719409s
  • max time network
    40s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    09-08-2021 12:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    87362_Video_Oynatıcı.apk

  • Size

    3.1MB

  • MD5

    141f171526468a833b82651bdc5076e2

  • SHA1

    bd25a345c660790d0afd89a89c51616d0fe87ce8

  • SHA256

    d0e3ea241c345f8988d9f0b9064c1ac1cce7bb2390b28021ee925097372a8308

  • SHA512

    c1b41d1ea501f7a5f3ca883c554c443a7178b417d7957d3b1f28d8a0aa02162f891f519e2d43b9dd2bc07cb07e6014fbc241b6be96299a66f3dea2b16db8aefe

Score
10/10
hydrabankerinfostealerobfuscationtrojan

Malware Config

Extracted

Family

hydra

C2

http://courteneyguerrero584.xyz

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 3 IoCs
    obfuscation

Processes

  • com.glvygfsf.qnnlsls
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3745

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.glvygfsf.qnnlsls/code_cache/secondary-dexes/MultiDex.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /data/user/0/com.glvygfsf.qnnlsls/code_cache/secondary-dexes/base.apk.classes1.zip
    MD5

    0919b5e9b8cf76f592f20ea5a256f38b

    SHA1

    98b0107bd6d0a22ef6e2da1e479d3ceda7a6b06e

    SHA256

    0b02b766d931ec614b6ecb41159217fc0f07ee4c2664b3190f4cd566ee8d4f46

    SHA512

    14ce5d59a107f1851ff5f644ee00a45843938b9bd970ceb0bde22c9ce5cd5a145c0d5ee11eabda0f93249f5b1e2c9cf9a48658a9e801946f2d24d1c33dc44f3f

    Download Submit
  • /data/user/0/com.glvygfsf.qnnlsls/code_cache/secondary-dexes/tmp-base.apk.classes4034024073546850103.zip
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /data/user/0/com.glvygfsf.qnnlsls/shared_prefs/multidex.version.xml
    MD5

    b0c4107e420c542664853c5e703a6189

    SHA1

    f3a6a6c8de95f205d1c83b28a0643f8b82b6b6a0

    SHA256

    917a2e96fa37410044f112f182083177c8b078fd8e00930a5c4a31bc8881cc03

    SHA512

    b107e4614624ad9f9992b45e7dbe2404ee0b85c6d64647a9fe22a195b3f009c39b2f08c0b8e7e06ac92f867801a21ecc2c7ca8ff91f4db8a65d23448914e08c3

    Download Submit
  • /data/user/0/com.glvygfsf.qnnlsls/shared_prefs/pref_name_setting.xml
    MD5

    d94f753c5c1b9c4da2cb2bf30eba5798

    SHA1

    43c58b82b8a2711625b4434ce4924ccb06cb1bdc

    SHA256

    ab1a93b57121d0cf60e758643fd37cba9eb28340df58ed0fce5609b9db3d8255

    SHA512

    cd8d2112b668ff24b3ddbf49e5c32769ae606e9117c1199c3dc7e1c0ec0b85c93d285052ff11dfa3b1f5a7bdcc1d19ffd3fef2301fecf63159b1c253114d7385

    Download Submit
  • /data/user/0/com.glvygfsf.qnnlsls/shared_prefs/pref_name_setting.xml
    MD5

    3250bd4508a7eb48e9c2893f54f4a0a7

    SHA1

    ab510b35048f616d003b6500e0b574684a2a1bde

    SHA256

    01038adf5e5135f213e444b442e3586fdc4bb003132d5eb0fe0f3eea30bafe5e

    SHA512

    a6e16877eeb7d51829b80e9c97f8413510c480b185f112eaf170816173269dd455e6f53c50c8ea41576b91391a71ab64a7b4f1251047777ac661cbe224d5779b

    Download Submit
  • /data/user/0/com.glvygfsf.qnnlsls/shared_prefs/prefs30.xml
    MD5

    12d6ab1d27552f5788e1667ec0eb1360

    SHA1

    f0c1a775a55b7bb45fe65579b526cf4360c0c4d6

    SHA256

    52e178aa40fd1c71b3a4e8fdfb73fba744ac754430d94697f4d2aaa6823c0d18

    SHA512

    87eb0dba3f5fbb8801a5b8a07849c8634698d64333f77d548f4596221d2f3d7cba7288ebb0fe0b7f9357add2636b07c6e9cd24aa887dd6cce6d22a1b7e2d3d32

    Download Submit