Overview

overview

10

Static

static

7

easybank.apk

android_x86

10

easybank.apk

android_x64

10

easybank.apk

android_x64

10

Resubmissions

23-04-2022 16:29

220423-tzlt6adce4 10

06-04-2022 14:07

220406-reyxwadeh5 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    easybank.apk

  • Size

    3.3MB

  • Sample

    220406-reyxwadeh5

  • MD5

    c81e236e8e7445375ee40d8e3f327873

  • SHA1

    43fd1ac04a1793ceb60061c402c3f2bab67daa1c

  • SHA256

    9939bea82bef38dff91be0182d26c13694dec687d1b8971bb2924076b89646f1

  • SHA512

    f9a385117ca8b1c2a407c9d3e2bb24dd084b595a6e35f1be5c6526b872bdad215b2d365cb5e2b86a2abdde1b5f12adef515a1f44d78ae4a15a1de84f9fe36a48

Score
10/10
hydraandroidbankerinfostealertrojan

Malware Config

Targets

    • Target

      easybank.apk

    • Size

      3.3MB

    • MD5

      c81e236e8e7445375ee40d8e3f327873

    • SHA1

      43fd1ac04a1793ceb60061c402c3f2bab67daa1c

    • SHA256

      9939bea82bef38dff91be0182d26c13694dec687d1b8971bb2924076b89646f1

    • SHA512

      f9a385117ca8b1c2a407c9d3e2bb24dd084b595a6e35f1be5c6526b872bdad215b2d365cb5e2b86a2abdde1b5f12adef515a1f44d78ae4a15a1de84f9fe36a48

    Score
    10/10
    hydrabankerinfostealertrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Hydra Payload

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Legitimate hosting services abused for malware hosting/C2

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks