Analysis

  • max time kernel
    4071101s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    23-05-2022 20:39

General

  • Target

    fffffffff.apk

  • Size

    3.1MB

  • MD5

    0fdca6790eaeecfa67508b31a429e424

  • SHA1

    ff05f9fe48d2c4f82d91dbb601ae0483311fe86c

  • SHA256

    e3ccad0c792bb1fef21740837b9049bb91106bdc813948ce7d3f9d8984edda7d

  • SHA512

    b65988b15783a77cf23ec6c9836df5e40efeb7d1d8280b5a54f23e98c665da228adbfa8992b5d681966c7ead67f2e163ca368766e53926b71fc1da4085dd2d4e

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

  • Hydra Payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.solve.hungry
    1⤵
    • Loads dropped Dex/Jar
    PID:6363

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.solve.hungry/app_DynamicOptDex/NmHLUYO.json
    Filesize

    1.9MB

    MD5

    f6a88e10b34f9bb7a9316868e4607ad4

    SHA1

    92b30897951506fc49326744623711571fb490a0

    SHA256

    072ad6d0030f39d35f4402b6a3c7511475defc24ea1e3e21693dec158f29b3e9

    SHA512

    0b6a7ebbf3f3906ddffc1fbec84fa2382dff306274d4db94c07a76288a664fd813c96b0e83b89189c271918fbd0b70c4bfcb5c912b14c7435aa1920ba7632390

  • /data/user/0/com.solve.hungry/app_DynamicOptDex/NmHLUYO.json
    Filesize

    5.0MB

    MD5

    cf8f8432d6e5ee6e6fe8c9b19654d703

    SHA1

    edf634e480c732e92ae04d2650b8bd97ac73a7c0

    SHA256

    55c4cf23d17bcc3187bc0464b6b4a17d305851517cf2c1f757f9f24bb11d2370

    SHA512

    9e26dd73787614c3829be47bf9f01ff618cac2f6c1ac7bf0d0942820e00d5ecffa85b98da78d49a061c5fc10e28eb2c528d56a04db20a4b9b71a03d16fb3e766

  • /data/user/0/com.solve.hungry/app_DynamicOptDex/oat/NmHLUYO.json.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e