Resubmissions

13/04/2026, 18:17

260413-wxa1zsgy3z10

23/04/2022, 16:29

220423-tzlt6adce410

06/04/2022, 14:07

220406-reyxwadeh510

General

  • Target
    easybank.apk
  • Size 3.3MB
  • Sample220423-tzlt6adce4
  • SHA256 9939bea82bef38dff91be0182d26c13694dec687d1b8971bb2924076b89646f1
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      easybank.apk
    • Size 3.3MB
    • SHA256 9939bea82bef38dff91be0182d26c13694dec687d1b8971bb2924076b89646f1
    • MD5 SHA1 SHA512
    • Hydra

      Android banker and info stealer.

    • Hydra Payload

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

MITRE ATT&CK Enterprise v6

Tasks