hydra | 64d0257352222162db7125f27e4ef16958c515326adab554d50698a1685e46ef | Triage

Analysis

max time kernel
1171968s
max time network
157s
platform
android_x64
resource
android-x64-arm64
submitted
01-03-2022 14:18

Sharing

Report Analysis Logs

General

Target

psk.apk
Size

7.1MB
MD5

975f5eff0e960994608742678ca70208
SHA1

e311d4f346b363665c462658889ddfb73c4dd8da
SHA256

64d0257352222162db7125f27e4ef16958c515326adab554d50698a1685e46ef
SHA512

7a2fbbb412504f431d6fdbd1f3390ab725eb7cd5ae37afaccf604d0d329ab6cecba45c90d48ef722a680026eac13356987ba4fdf85845c2cb689f0fce8119622

Score

10^/10

hydra banker infostealer trojan

Malware Config

Signatures

Hydra
Android banker and info stealer.
banker trojan infostealer hydra

Makes use of the framework's Accessibility service. 1 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.otdvrvmj.hqlhtve

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.otdvrvmj.hqlhtve/ThgGhuajff/8g6IHGhjgU8fygI/base.apk.Gkjhp8h1.GIf	5538	com.otdvrvmj.hqlhtve

com.otdvrvmj.hqlhtve
1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
PID:5538
- com.otdvrvmj.hqlhtve
  2⤵
  PID:6083
- com.otdvrvmj.hqlhtve
  2⤵
  PID:6392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads