General

  • Target
    b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374.apk
  • Size 6.0MB
  • Sample220215-pbbl3aefa9
  • SHA256 b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374.apk
    • Size 6.0MB
    • SHA256 b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374
    • MD5 SHA1 SHA512
    • Hydra

      Android banker and info stealer.

    • Makes use of the framework's Accessibility service.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks