General

  • Target
    bawag.apk
  • Size 3.4MB
  • Sample220331-pql2cafhhm
  • SHA256 ab2e9fd467a198b293b276abc08d1a1c6a5e9679d5a89d1b45e31eb64b59238a
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      bawag.apk
    • Size 3.4MB
    • SHA256 ab2e9fd467a198b293b276abc08d1a1c6a5e9679d5a89d1b45e31eb64b59238a
    • MD5 SHA1 SHA512
    • Hydra

      Android banker and info stealer.

    • Hydra Payload

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Legitimate hosting services abused for malware hosting/C2

    • Reads information about phone network operator.

MITRE ATT&CK Enterprise v6

Tasks