Overview

overview

10

Static

static

7

bawag.apk

android_x86

10

bawag.apk

android_x64

10

bawag.apk

android_x64

10

Analysis

  • max time kernel
    3757742s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    31/03/2022, 12:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bawag.apk
  • Size 3.4MB
  • Sample220331-pql2cafhhm
  • SHA256 ab2e9fd467a198b293b276abc08d1a1c6a5e9679d5a89d1b45e31eb64b59238a
  • MD5 SHA1 SHA512
Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra Payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.belt.space
    1⤵
    • Loads dropped Dex/Jar
    PID:6306

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZZ.json
        • Path /data/user/0/com.belt.space/app_DynamicOptDex/ZZ.json
        • Size 1.9MB
        • SHA256 6e23c7bf2c0caef429ce4a83c9f6842fc29c50754aa5b238a162bb5637fdb6f7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ZZ.json
        • Path /data/user/0/com.belt.space/app_DynamicOptDex/ZZ.json
        • Size 5.0MB
        • SHA256 26fdc35c4216c1b7a810ac2e341630cca4b5faa92561df7c42ccb6ea408a8d7f
        • MD5 SHA1 SHA512 SSDEEP
        Download