Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

E909B4ADCE...35.apk

android_x86

10

E909B4ADCE...35.apk

android_x64

10

E909B4ADCE...35.apk

android_x64

10

Analysis

  • max time kernel
    2729434s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    19/03/2022, 14:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    E909B4ADCEF7B43FE8A1A8DCDBDF1E59F9A9BE01954FD8CD2D8DA27BADD18E35.apk

  • Size

    4.0MB

  • MD5

    a61a768c681d326bc19762cdeaacd375

  • SHA1

    1e7a51456d60d6b53aeae656aaf0bc1eb68fd194

  • SHA256

    e909b4adcef7b43fe8a1a8dcdbdf1e59f9a9be01954fd8cd2d8da27badd18e35

  • SHA512

    d520f762c5eec0f47c00bef78156ba3809ea8d84a91729162848ed2480fe290a8a9fd6c0ac939dede5f9746bb460101f724f311a50b7c634ce3bf5067cced365

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra Payload 1 IoCs
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs

Processes

  • com.doctor.increase
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    PID:7076
    • toolbox ps
      2⤵
        PID:7224
      • /system/bin/sh -c /data/user/0/com.doctor.increase/files/tor_source/tor.so DataDirectory /data/user/0/com.doctor.increase/app_data --defaults-torrc /data/user/0/com.doctor.increase/files/tor_source/torrc -f /data/user/0/com.doctor.increase/files/tor_source/torrc.custom --verify-config
        2⤵
          PID:7248

      Network

      MITRE ATT&CK Enterprise v6

      Replay Monitor

      Loading Replay Monitor...

      Downloads