Analysis
-
max time kernel
1115292s -
max time network
156s -
platform
android_x64 -
resource
android-x64-arm64-20220310-en -
submitted
08-06-2022 08:39
General
-
Target
FlashPlayerV1.apk
-
Size
3.2MB
-
MD5
fa081ed138a34e5b8ca7e2677230eada
-
SHA1
b5f8d1ece1b7a1b80bb3590fe745a657ebdeaca9
-
SHA256
d1a0e02d4ae782c65dadba7016fba59fd9692daff9b6a10a5c11a866fa24a474
-
SHA512
733ef67176c515110bff56d0235ae857d88cd9013aa1bbecbcbc18d87b35e1105dd078e6f4c6bfba8d496a139fdedbf9466f1a23fe85441fb6c5efe271d5b894
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 1 IoCs
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
Processes
-
com.coil.much1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD56b07a8de0cab86fde5faadad7ecc6596
SHA10ca9de6a6d7b3f6b5ecbb6655351e4394e6a7848
SHA2563abf07b4cf819794a57098cfda493012ca75f05148e7d9757e06c2d131cd3b1a
SHA5123226a93fe2fdd4692dd377e63c51841e48437296d410a0b860efaac70c131da06a7746a5ad441f32b6e07c0096ddbb733c41c4d5647a469db0ae4d23a101e124
-
Filesize
5.0MB
MD5d95f1101eeab1f220343e0ed048ef7c0
SHA1cdc16afc942ad5a8d4b6ceae23edbcfa67ecd01a
SHA25633da05b58fd65c304b74a640a9851b5f6783ee6a7272e4b60908663c35fea4b7
SHA512166a8d8e20046d6437da342e01203aa951b68eb1bc4da8d2b7ec6ac1a4a73a4121a49df7e4ebd27bf48a51b5050c36cbb836cce747c50bdeb4ac0254b783497f