Analysis
-
max time kernel
1851166s -
max time network
161s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 21:03
General
-
Target
b848eb8ada2bc104098798898e48535b.apk
-
Size
3.2MB
-
MD5
b848eb8ada2bc104098798898e48535b
-
SHA1
358ffd876547647237d0d3fa4f78a7c2810604de
-
SHA256
e5f43b416cb378986960c47897a2331832c764344f4e8bc952f4fa2a7a9567c1
-
SHA512
9b6ca76939ab6d640aec67a17dc17c8c24aea81cc67687923997c11a77074738fa917bfb1028f07a82b896a243f0f5db2f8af27c10b9d1ab1b9831ba54473de1
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
Processes
-
com.flame.fit1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.flame.fit/app_DynamicOptDex/Lpu.jsonFilesize
1.9MB
MD550779a69dddefbbcd5435bf2e9255bf1
SHA162c7cc1f00d015c86ca80c06f8a44cc31e1699a4
SHA25654fb7c9d67b8b223ef2a2f66cbc9f4a9f751326e3aadd78d464db5587893a169
SHA5129246150e9ac253bbd8707ab99895017f96a50d4217ae5580e8602d2546c6b993f231aadc25fa9724f17be5510b6b6d6340856b6c573d5afd751d7c0fa15d737d
-
/data/user/0/com.flame.fit/app_DynamicOptDex/Lpu.jsonFilesize
5.0MB
MD5b42b9d7a408b0e1e52109b9695f2e6eb
SHA1beff86894edf19b07374ec23339d633bafcc103f
SHA256f461b5a0ac8dc0516a71c6ea2306abfd876d9324bc11adec950456255e7540f1
SHA5127c726032d649d76a1c3a7b9e8c6ab6845bb2c3561933202a4748400d39e72f5c1f816cc2a1445a8bc15c08049eae3e171442b3880e42a09a74b3981c071f2603
-
/data/user/0/com.flame.fit/app_DynamicOptDex/oat/Lpu.json.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e