Analysis
- max time kernel
4249636s - max time network
160s - platform
android_x86 - resource
android-x86-arm - submitted
15/02/2022, 12:08
General
- Target b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374.apk
- Size 6.0MB
- Sample220215-pbbl3aefa9
- SHA256 b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374
Score
10/10
Malware Config
Signatures
- Hydra
Android banker and info stealer.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Reads information about phone network operator.
Processes
-
com.ibpizpaa.bdtddqo1⤵
- Loads dropped Dex/Jar
-
com.ibpizpaa.bdtddqo2⤵
-
-
/system/bin/dex2oat2⤵
- Loads dropped Dex/Jar
-
-
com.ibpizpaa.bdtddqo2⤵
-
-
toolbox2⤵
-
-
com.ibpizpaa.bdtddqo2⤵
-
-
/system/bin/sh2⤵
-
-
/system/bin/ndk_translation_program_runner_binfmt_misc2⤵
-
-
com.ibpizpaa.bdtddqo2⤵
-
-
/system/bin/sh2⤵
-
-
/system/bin/ndk_translation_program_runner_binfmt_misc2⤵
-
/system/bin/ndk_translation_program_runner_binfmt_misc3⤵
-
-
-
/system/bin/ndk_translation_program_runner_binfmt_misc1⤵