hydra | 069bddcaf8203ae0aa728e7745dd80203f688f446c6789b31c8f00ebcbfbe9c9 | Triage

Analysis

max time kernel
799828s
max time network
158s
platform
android_x64
resource
android-x64-arm64
submitted
06-01-2022 13:53

Sharing

Report Analysis Logs

General

Target

28054_Video_Oynatıcı.apk
Size

2.6MB
MD5

1b922faa991ecc4989a577f3632fb354
SHA1

a2facadad960ba106535d412c119aac03d89083f
SHA256

069bddcaf8203ae0aa728e7745dd80203f688f446c6789b31c8f00ebcbfbe9c9
SHA512

d3c5204f815eadf5606db38b12ec6c50dad6494ce93f30639f8cf16858f8be0b5054fd0a7fcfaedd002406c50bbbf31baa9e1f392e9a818598d6b4c77e0d6461

Score

10^/10

hydra banker infostealer trojan

Malware Config

Extracted

Family

hydra

C2

http://viveklees437.website

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra

Hydra Payload 2 IoCs

resource	yara_rule
behavioral1/memory/6232-0.dex	family_hydra
behavioral1/memory/6232-1.dex	family_hydra

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.cargo.coconut/app_DynamicOptDex/xLCCg.json	6232	com.cargo.coconut
/data/user/0/com.cargo.coconut/app_DynamicOptDex/xLCCg.json	6232	com.cargo.coconut

com.cargo.coconut
1⤵
- Loads dropped Dex/Jar
PID:6232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads