hydra | b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374 | Triage

Analysis

max time kernel
4249606s
max time network
157s
platform
android_x64
resource
android-x64-arm64
submitted
15-02-2022 12:08

Sharing

Report Analysis Logs

General

Target

b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374.apk
Size

6.0MB
MD5

f9bc80b984b9ca2012dab7b557d25f25
SHA1

e13fdc7d91e9b890cfe5940a7245344a01a2179e
SHA256

b9dd9650cb0591a0c15e44da102dc65449aca415822c102c26fb7a0321803374
SHA512

5090e552ce2efb5bbae29a05b00d5ff76bf61f5484e327df686f49ac99d23955bc6d496ebe23326c218e6cccee745e970a899596f60c90c57f1a6f2e2323cd0a

Score

10^/10

hydra banker infostealer trojan

Malware Config

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra

Makes use of the framework's Accessibility service. 1 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.ibpizpaa.bdtddqo

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.ibpizpaa.bdtddqo/ghfh8GUUgG/wtgyqfjGfqhpttG/base.apk.q8juGj71.wqi	5544	com.ibpizpaa.bdtddqo

com.ibpizpaa.bdtddqo
1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
PID:5544
- com.ibpizpaa.bdtddqo
  2⤵
  PID:6171
- com.ibpizpaa.bdtddqo
  2⤵
  PID:6411

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads