Analysis
-
max time kernel
3087209s -
max time network
165s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
12-05-2022 11:21
General
-
Target
E3DCF86812F72B774EE51563538AD2DEB75ABA98C583A561046D98E2A41D47F8.apk
-
Size
1014KB
-
MD5
a32c36009a37893be90e4f385b26b5ee
-
SHA1
1f3f0652c0d89c4907281d76de3c983373a5fcb2
-
SHA256
e3dcf86812f72b774ee51563538ad2deb75aba98c583a561046d98e2a41d47f8
-
SHA512
9358f3b1d5a48f8d438ca25f4dd8cb5cbc6887f7f1bd69b92d573c19d9857713c17e4a3d310b72d91d1fe419816fe1061ca8d96492d380af1b9dc0104adde7b4
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
Processes
-
com.comfort.digital1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.comfort.digital/app_DynamicOptDex/heH.jsonFilesize
239KB
MD53680e48f9dfe67f1447957efa0a60caf
SHA19acdc39a4b2bab8a436df149f9d81155f84a8cde
SHA2561365efea791e40a50a1b91f7d868b85c84ca3d77f18113b22ac51d86c85532be
SHA512c61aa7f28c14ab819cef8d8dd5c80a26187e5f6c5f2ad9bff0cbe255e564f48ab1077aad56422bdf09586d94e42566aececcc52987b6c0b050e6d9c3cce45da4
-
/data/user/0/com.comfort.digital/app_DynamicOptDex/heH.jsonFilesize
574KB
MD5c979254964da64c9819cead2cc32e23a
SHA144f8fb253b10fc7e0e2cdddad7db8ab5571ad7d0
SHA2563d232856dd39589a059cbc2c422f98dbd60335ca042e77278896d24e7d593516
SHA51229f35c2b6ccb0449a35968ab2233108a27503f23f5b88286b922285a710108e4db7a7d133632cf1bf4f6d93c5051f4154aa19f84d5cd067f7dfc9a4b826ea9c6
-
/data/user/0/com.comfort.digital/app_DynamicOptDex/oat/heH.json.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e