Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

psk.apk

android_x86

10

psk.apk

android_x64

10

psk.apk

android_x64

10

Analysis

  • max time kernel
    2510316s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    26/01/2022, 09:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    psk.apk

  • Size

    6.9MB

  • MD5

    0cf1b5b0244c4bb324412bce80d33352

  • SHA1

    9b5c773c3a13014d620a38f9da146459da30b54b

  • SHA256

    d5a64f4885dffab0a12c161d7eff5722294eda8111242ddfadee907f6a609e4d

  • SHA512

    4fd37b310176b24c8faccc7e0b8cc891e3c397127592548ac7c2f55cbf9216db58d3e0f5dc9b4fcefa74c8026b3764588bf305916edcf21425b21b2bd9c7feb2

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.zharuirh.wytppzi
    1⤵
    • Loads dropped Dex/Jar
    PID:5022
    • com.zharuirh.wytppzi
      2⤵
        PID:5140
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:5140
      • com.zharuirh.wytppzi
        2⤵
          PID:5424
        • toolbox
          2⤵
            PID:5424
          • com.zharuirh.wytppzi
            2⤵
              PID:5454
            • /system/bin/sh
              2⤵
                PID:5454
              • /system/bin/ndk_translation_program_runner_binfmt_misc
                2⤵
                  PID:5454
                • com.zharuirh.wytppzi
                  2⤵
                    PID:5573
                  • /system/bin/sh
                    2⤵
                      PID:5573
                    • /system/bin/ndk_translation_program_runner_binfmt_misc
                      2⤵
                        PID:5573
                        • /system/bin/ndk_translation_program_runner_binfmt_misc
                          3⤵
                            PID:5652
                      • /system/bin/ndk_translation_program_runner_binfmt_misc
                        1⤵
                          PID:5665

                        Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads