Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1851166s -
max time network
161s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16/06/2022, 21:03
Static task
static1
Behavioral task
behavioral1
Sample
b848eb8ada2bc104098798898e48535b.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
b848eb8ada2bc104098798898e48535b.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
b848eb8ada2bc104098798898e48535b.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
b848eb8ada2bc104098798898e48535b.apk
-
Size
3.2MB
-
MD5
b848eb8ada2bc104098798898e48535b
-
SHA1
358ffd876547647237d0d3fa4f78a7c2810604de
-
SHA256
e5f43b416cb378986960c47897a2331832c764344f4e8bc952f4fa2a7a9567c1
-
SHA512
9b6ca76939ab6d640aec67a17dc17c8c24aea81cc67687923997c11a77074738fa917bfb1028f07a82b896a243f0f5db2f8af27c10b9d1ab1b9831ba54473de1
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 1 IoCs
resource yara_rule behavioral2/memory/6221-0.dex family_hydra -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.flame.fit/app_DynamicOptDex/Lpu.json 6221 com.flame.fit -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD550779a69dddefbbcd5435bf2e9255bf1
SHA162c7cc1f00d015c86ca80c06f8a44cc31e1699a4
SHA25654fb7c9d67b8b223ef2a2f66cbc9f4a9f751326e3aadd78d464db5587893a169
SHA5129246150e9ac253bbd8707ab99895017f96a50d4217ae5580e8602d2546c6b993f231aadc25fa9724f17be5510b6b6d6340856b6c573d5afd751d7c0fa15d737d
-
Filesize
5.0MB
MD5b42b9d7a408b0e1e52109b9695f2e6eb
SHA1beff86894edf19b07374ec23339d633bafcc103f
SHA256f461b5a0ac8dc0516a71c6ea2306abfd876d9324bc11adec950456255e7540f1
SHA5127c726032d649d76a1c3a7b9e8c6ab6845bb2c3561933202a4748400d39e72f5c1f816cc2a1445a8bc15c08049eae3e171442b3880e42a09a74b3981c071f2603