Analysis

  • max time kernel
    3451288s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16/05/2022, 16:23

General

  • Target
    5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577.apk
  • Size 4.6MB
  • Sample220516-tvtdfaadh9
  • SHA256 5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

  • Hydra Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • wjhtcnrkkar.lubuxqtnmzucraly.xasiafinjzlmxme
    1⤵
    • Loads dropped Dex/Jar
    PID:6018

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        TD.json

        • Path /data/user/0/wjhtcnrkkar.lubuxqtnmzucraly.xasiafinjzlmxme/app_DynamicOptDex/TD.json
        • Size 2.7MB
        • SHA256 563ddf7dc401b739398eb480663a0ca44c7592b189e51fe82539349ef1670f98
        • MD5 SHA1 SHA512 SSDEEP

        TD.json

        • Path /data/user/0/wjhtcnrkkar.lubuxqtnmzucraly.xasiafinjzlmxme/app_DynamicOptDex/TD.json
        • Size 2.7MB
        • SHA256 cb624aaa4569cdffc9f9706638a90d33a6bb180ad31cb7a9a5f238ca99e32919
        • MD5 SHA1 SHA512 SSDEEP

        TD.json

        • Path /data/user/0/wjhtcnrkkar.lubuxqtnmzucraly.xasiafinjzlmxme/app_DynamicOptDex/TD.json
        • Size 2.7MB
        • SHA256 cb624aaa4569cdffc9f9706638a90d33a6bb180ad31cb7a9a5f238ca99e32919
        • MD5 SHA1 SHA512 SSDEEP