Overview

overview

10

Static

static

7

FlashPlayerV1.apk

android_x86

10

FlashPlayerV1.apk

android_x64

10

FlashPlayerV1.apk

android_x64

10

Analysis

  • max time kernel
    1115292s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    08-06-2022 08:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FlashPlayerV1.apk

  • Size

    3.2MB

  • MD5

    fa081ed138a34e5b8ca7e2677230eada

  • SHA1

    b5f8d1ece1b7a1b80bb3590fe745a657ebdeaca9

  • SHA256

    d1a0e02d4ae782c65dadba7016fba59fd9692daff9b6a10a5c11a866fa24a474

  • SHA512

    733ef67176c515110bff56d0235ae857d88cd9013aa1bbecbcbc18d87b35e1105dd078e6f4c6bfba8d496a139fdedbf9466f1a23fe85441fb6c5efe271d5b894

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra Payload 1 IoCs
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs

Processes

  • com.coil.much
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    PID:6651

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.coil.much/app_DynamicOptDex/boI.json
    Filesize

    1.9MB

    MD5

    6b07a8de0cab86fde5faadad7ecc6596

    SHA1

    0ca9de6a6d7b3f6b5ecbb6655351e4394e6a7848

    SHA256

    3abf07b4cf819794a57098cfda493012ca75f05148e7d9757e06c2d131cd3b1a

    SHA512

    3226a93fe2fdd4692dd377e63c51841e48437296d410a0b860efaac70c131da06a7746a5ad441f32b6e07c0096ddbb733c41c4d5647a469db0ae4d23a101e124

    Download Submit
  • /data/user/0/com.coil.much/app_DynamicOptDex/boI.json
    Filesize

    5.0MB

    MD5

    d95f1101eeab1f220343e0ed048ef7c0

    SHA1

    cdc16afc942ad5a8d4b6ceae23edbcfa67ecd01a

    SHA256

    33da05b58fd65c304b74a640a9851b5f6783ee6a7272e4b60908663c35fea4b7

    SHA512

    166a8d8e20046d6437da342e01203aa951b68eb1bc4da8d2b7ec6ac1a4a73a4121a49df7e4ebd27bf48a51b5050c36cbb836cce747c50bdeb4ac0254b783497f

    Download Submit
  • /data/user/0/com.coil.much/app_DynamicOptDex/oat/boI.json.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit