hydra | d5a64f4885dffab0a12c161d7eff5722294eda8111242ddfadee907f6a609e4d | Triage™

Analysis

max time kernel
2510330s
max time network
176s
platform
android_x64
resource
android-x64-arm64
submitted
26/01/2022, 09:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
psk.apk
Size 6.9MB
Sample220126-kywtasbea9
SHA256 d5a64f4885dffab0a12c161d7eff5722294eda8111242ddfadee907f6a609e4d
MD5 0cf1b5b0244c4bb324412bce80d33352
SHA1 9b5c773c3a13014d620a38f9da146459da30b54b
SHA512 4fd37b310176b24c8faccc7e0b8cc891e3c397127592548ac7c2f55cbf9216db58d3e0f5dc9b4fcefa74c8026b3764588bf305916edcf21425b21b2bd9c7feb2
MD5 SHA1 SHA512

Score

10^/10

hydra banker infostealer trojan

Malware Config

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra

Makes use of the framework's Accessibility service. 1 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.zharuirh.wytppzi

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.zharuirh.wytppzi/afUkGIaaji/wkhyygtjjiwwfgu/base.apk.UfUiiHU1.jU8	5705	com.zharuirh.wytppzi

com.zharuirh.wytppzi
1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
PID:5705
- com.zharuirh.wytppzi
  2⤵
  PID:6091
- com.zharuirh.wytppzi
  2⤵
  PID:6235

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads