Analysis
- max time kernel
1932368s - max time network
163s - platform
android_x64 - resource
android-x64-arm64 - submitted
23/08/2021, 13:20
General
- Target 49506_Video_Oynatıcı.apk
- Size 3.2MB
- Sample210823-sasf23rl4j
- SHA256 ae6f5521304808c1871efeb9168ad649aa4996c9c55909c6c3580f43203a40b1
Score
10/10
Malware Config
Signatures
- Hydra
Android banker and info stealer.
- Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
- Requests enabling of the accessibility settings. 1 IoCs
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Reads name of network operator 1 IoCs
Uses Android APIs to discover system information.
- Uses reflection 1 IoCs
Processes
-
com.vlvkbtii.uprlqjs1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Reads name of network operator
- Uses reflection