Analysis
-
max time kernel
3451279s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-05-2022 16:23
Static task
static1
Behavioral task
behavioral1
Sample
afe9d5ea1d5b43b83c35ec40464a1dbe05ffeb563c059cba0b8e153a90d87e08.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
afe9d5ea1d5b43b83c35ec40464a1dbe05ffeb563c059cba0b8e153a90d87e08.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
afe9d5ea1d5b43b83c35ec40464a1dbe05ffeb563c059cba0b8e153a90d87e08.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
afe9d5ea1d5b43b83c35ec40464a1dbe05ffeb563c059cba0b8e153a90d87e08.apk
-
Size
4.7MB
-
MD5
0463719b17d6d11d364aefe067669468
-
SHA1
e7dc170ecb885081a95c9ca6940bbb2b8c6d2ae9
-
SHA256
afe9d5ea1d5b43b83c35ec40464a1dbe05ffeb563c059cba0b8e153a90d87e08
-
SHA512
b97a43174028b3ded889f0f3c77947b847da2a45d81a8fd03b4057c7e1f3c3de91488c3c85beb99ecdca55ed55669e6418d05cc1b653676cd4a1afd1660aa8f7
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 2 IoCs
resource yara_rule behavioral2/memory/6303-0.dex family_hydra behavioral2/memory/6303-1.dex family_hydra -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/cxu.smnlgnhuqdihggdl.oxynkjgraxubptjtmitri/app_DynamicOptDex/yWmxt.json 6303 cxu.smnlgnhuqdihggdl.oxynkjgraxubptjtmitri /data/user/0/cxu.smnlgnhuqdihggdl.oxynkjgraxubptjtmitri/app_DynamicOptDex/yWmxt.json 6303 cxu.smnlgnhuqdihggdl.oxynkjgraxubptjtmitri -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
MD50cb066c7a2a1249ee30d8b90b238402a
SHA15cbb73cd307d5c0ee7103fdd999bad8a46ee7bd0
SHA2562f6bd86c2b5b099e103dd4bce68a6381168252c2cc79877f6f98bc22c9ca452e
SHA5120f322b15d2118a5956dee6996c8eeeba704595e04de3f7196a3f64f2204cb430f257bb0c46242d16e9d9a6b6cf3e36888849707bbceb89fe25f9269ee677eda5
-
Filesize
2.9MB
MD5af3ef3631ec1dfc409b5b6386931ea4a
SHA198bbfc27653cbef6dd710ca9bcb3d99c4f650993
SHA2569016b8bd33393af5e6ae56386513afa0f67f6a664ad5f9f121895a76af963e80
SHA5123af0794561a7bbd07629c3a59c3205465e7c74d90f352fd1f5eb259ac32f13111f9cef80960348ba11b705f75c0cdcc91edc80a83b46df19e2398c526a409e7a
-
Filesize
2.9MB
MD5af3ef3631ec1dfc409b5b6386931ea4a
SHA198bbfc27653cbef6dd710ca9bcb3d99c4f650993
SHA2569016b8bd33393af5e6ae56386513afa0f67f6a664ad5f9f121895a76af963e80
SHA5123af0794561a7bbd07629c3a59c3205465e7c74d90f352fd1f5eb259ac32f13111f9cef80960348ba11b705f75c0cdcc91edc80a83b46df19e2398c526a409e7a