Analysis
-
max time kernel
151995s -
max time network
165s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
08-04-2022 12:01
General
-
Target
mvTX2ACA_Google_Chrome_-_aHR0cDovL2xvYWJ4d3g1emJoZmFjZ3gzbHNrd2RzcTdqZHUyNXZta2RydHBuaTJrNnVzZGVhb2N.apk
-
Size
3.7MB
-
MD5
1d864a8f11e7919cbc8d0927afa6a7fd
-
SHA1
67288271c7daca377faadc68322d6888fe51c0bb
-
SHA256
d6709aa4b5a1f255b36df1ae342b43a5eea637d1c5ee322bbca233030e93672e
-
SHA512
4a3e209d10cd7a5c38876ae07f10f87dcbfddcce0877e9ca589d4ca2e4606d382498a83af04d4bdc6428e2c3d91b8d7761c3c37e14c120a3b5f4af5dfe649eb3
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
Processes
-
com.amused.cart1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.amused.cart/app_DynamicOptDex/gftnD.jsonFilesize
1.9MB
MD52819c436d9f24cb073eca7a440629069
SHA19e0fb958fc694eee52cddf988a0fce3e0af3f9b2
SHA25639a8bb7d181615938e6811cda6292d8dc5d94657c23c67661fe20518c0042044
SHA512a3918f2d1be2d88303ab1a60f0e19847b5aabe35303062120d600df0b7d017c17306595aa82e4c3d777e3975e9eb0b78751712feadeb690ee42122a513b64012
-
/data/user/0/com.amused.cart/app_DynamicOptDex/gftnD.jsonFilesize
5.0MB
MD5854e9bae18bb376e651ad2c0a624ab06
SHA15851daca98f585c4a74c56346cf1e333e53539dd
SHA2562ec148b30c11fe04333d61e1b1381a6da153ff5f93746346dd14365c6ef66355
SHA51284efa443f8baa267da47215e2008b1f4655d72a505e10f36d47ea36eeb82da43d313953fff6d319c1cb665079615464fd7319fa3a4c031f52600395ece522b42
-
/data/user/0/com.amused.cart/app_DynamicOptDex/oat/gftnD.json.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e