Overview

overview

10

Static

static

7

3529ee191f...bb.apk

android_x86

10

3529ee191f...bb.apk

android_x64

10

3529ee191f...bb.apk

android_x64

Analysis

  • max time kernel
    3451334s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16/05/2022, 16:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    3529ee191fc7d8a351436adb058e1b3d4f1ab460638eb26eda1e0b5e98800dbb.apk
  • Size 5.1MB
  • Sample220516-tvwtkaaea2
  • SHA256 3529ee191fc7d8a351436adb058e1b3d4f1ab460638eb26eda1e0b5e98800dbb
  • MD5 SHA1 SHA512
Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • fqey.lyrcbotqgnnwolmxceln.lsaga
    1⤵
    • Loads dropped Dex/Jar
    PID:6185

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        fbSikw.json
        • Path /data/user/0/fqey.lyrcbotqgnnwolmxceln.lsaga/app_DynamicOptDex/fbSikw.json
        • Size 3.1MB
        • SHA256 16b26a153b64156b279b866747990bfd029e637118805f8f29788c0a1da81b1f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        fbSikw.json
        • Path /data/user/0/fqey.lyrcbotqgnnwolmxceln.lsaga/app_DynamicOptDex/fbSikw.json
        • Size 3.1MB
        • SHA256 f30aed324101c4b87e153eb066e98722558bd1d2fc4fb80820e4978ff623a19c
        • MD5 SHA1 SHA512 SSDEEP
        Download

        fbSikw.json
        • Path /data/user/0/fqey.lyrcbotqgnnwolmxceln.lsaga/app_DynamicOptDex/fbSikw.json
        • Size 3.1MB
        • SHA256 f30aed324101c4b87e153eb066e98722558bd1d2fc4fb80820e4978ff623a19c
        • MD5 SHA1 SHA512 SSDEEP
        Download