hydra | 6005f5569a6240c36f07de53438df1615ea6f000000fa5452d5a8870afe6336b | Triage

Analysis

max time kernel
2213181s
max time network
49s
platform
android_x64
resource
android-x64-arm64
submitted
15/10/2021, 12:25

Sharing

Report Analysis Logs

General

Target

43891_Video_Oynatıcı.apk
Size

7.3MB
MD5

7433796ca18baa6386c024c07cace94f
SHA1

68ea3944453fafac292c15d7ac439a80bd8cb89f
SHA256

6005f5569a6240c36f07de53438df1615ea6f000000fa5452d5a8870afe6336b
SHA512

5df4e4a28fa05b0d47c9e05edd069fdaa04fe1ca8dbe7bd4eb70aee6e664ce91bd0a63aab71749841d2f8fd969a333b13ed19c356f953cbc4688ce6e7ceffc86

Score

10^/10

hydra banker infostealer trojan

Malware Config

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.rgubyqbh.gsaqvdg/lkkkfkguhv/gmqrtsyhh8ugghz/base.apk.8ggyxzk1.dhl	4300	com.rgubyqbh.gsaqvdg
[anon:dalvik-classes.dex extracted in memory from /data/user/0/com.rgubyqbh.gsaqvdg/lkkkfkguhv/gmqrtsyhh8ugghz/base.apk.8ggyxzk1.dhl]	4300	com.rgubyqbh.gsaqvdg

com.rgubyqbh.gsaqvdg
1⤵
- Loads dropped Dex/Jar
PID:4300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads