Analysis
-
max time kernel
2348112s -
max time network
161s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
22-06-2022 15:03
General
-
Target
4556936d8864a03fcd3586f6ada4fbce.apk
-
Size
3.1MB
-
MD5
4556936d8864a03fcd3586f6ada4fbce
-
SHA1
11e99f8c4255e1289fa99a6bf04efee9a487d85b
-
SHA256
d42c56e4bb96482a14b6b432737d73f39a991855feb118b1674c769d095baa66
-
SHA512
a01fa6ad24e2699dd731053cbe7a3aa9b71d3a5f5abe5d26ae6717d92a5aa934f228e58bb81a154a275933ec7277fadd762cd35fa36dad97148772b422a7873a
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra Payload 1 IoCs
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
Processes
-
com.wedding.turtle1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
-
toolbox ps2⤵
-
-
/system/bin/sh -c /data/user/0/com.wedding.turtle/files/tor_source/tor.so DataDirectory /data/user/0/com.wedding.turtle/app_data --defaults-torrc /data/user/0/com.wedding.turtle/files/tor_source/torrc -f /data/user/0/com.wedding.turtle/files/tor_source/torrc.custom --verify-config2⤵
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD535fd7ff1361f614892a8fdf2582e239f
SHA17ead54b758c0aeadd81432c00d60e54a672016d6
SHA256cd0c234b39fbe74538ed85ca1116a7658edc15997056cba2cccc1aeef1abf694
SHA5127abd217d0ce9d60e953f41c6f2a0ba2d276cbe4067ddbd50aea8f958f2f1bf16f73494c80ea954208e2d06296a5e1cc471c57356374b9487f153c9dd6248effe
-
Filesize
5.0MB
MD5b42b9d7a408b0e1e52109b9695f2e6eb
SHA1beff86894edf19b07374ec23339d633bafcc103f
SHA256f461b5a0ac8dc0516a71c6ea2306abfd876d9324bc11adec950456255e7540f1
SHA5127c726032d649d76a1c3a7b9e8c6ab6845bb2c3561933202a4748400d39e72f5c1f816cc2a1445a8bc15c08049eae3e171442b3880e42a09a74b3981c071f2603
-
Filesize
422B
MD5d677c5f4f107f72272e4313a23372507
SHA141400d3e8b23e61de2f7078005c87852b7b5ed4a
SHA256924b9034d71e7a7cb105c1fc9731b0ae25690db2f4fc50fb3e1e0fb3db9c2e54
SHA512d36168a2eaf2167002d99500ba906bd7fb6cbdbcf14a2d257dabfdd8c271783ed95e827dcd96571813e4d67f5a78cc9e70598c7b6257af9127f110ef13d9f14a
-
Filesize
3.9MB
MD59893523429f07b4ddc82e4133ff6603d
SHA1ff83ad73de7672c77edf8888f4b241642c7c90f7
SHA256d79a14e1b685ec9cfb3e9a489b9650e4092eccc468c9eef4222765857e83d96e
SHA5122346a2d1616894b350fdcc6833f33a16bc031809ce80160f35af78b05a9c867d722979cdb3725c5bcddaa54518c58d88b0320a20da5f752a03c2c4758b84126a
-
Filesize
2.2MB
MD53a6750bc0ab780292491c6a2b2bdc2e8
SHA1b1cdbfeb7c88f82ef3b5289cafeed1321fa4693f
SHA25626e2b88c992873131ba6422d6eb8f6ced94add2f5abfdbe3dcca4cbd79861d67
SHA512f7a1c555b8fdea9a132367d2c0d6396c0045bf13375a3b64b686f7ea34b8ed6868d9253ca1902fbd2538994482f363045be771596d3a2c0a6a017b03903b36c7
-
Filesize
6.7MB
MD58f75c0f064ae808474d98334419374b2
SHA12541a68db820e825e40f8955baf9148113afbc49
SHA25660c73335d1aca9219ec0c355e201d46160549b47534f1074751d4f0dc0f2d506
SHA51241439bf307f77343e123aedf83bed1ad2d77faaeecdd9daa2c447d1a2b8e6bb44aca861a950161a0298f7150c37480e5d22126a466025de8f10c9d083e96e58f
-
Filesize
6.9MB
MD55183e07a25ec7654bbd9405b5f1a4c75
SHA125057eeb42ff82668cd49b9e1bcfc39b2229955d
SHA2564119996e6e2c6a57ad245c40368732972eeaf40bc9e2c22c396d69afeb4bea15
SHA512a1bbd42ff89c21025404185e28ffea01906860b41ae6bb6e5d725ef28b8131e9501da7798ff0807f300cf018132e06c176332c1aa31939676bdf0cc08a3f1194
-
Filesize
123B
MD5882a5c7bb55ad342d352770ad1a04c90
SHA1b048a9cf4926febbed82f2804207bd7576a8e8e0
SHA256caa24da47c90ed4a260ee260ecd1dab3f8937688e82ae0a3705703b38da43278
SHA5129f3863f873fdb5625d251d0bd1cdd52f683844ead8e458571e21af4f65c947c2da0cdb3036ca4e1d9d7ca4cccbb097aaea1e253604b99a3965d4a2c4f04f97ec
-
Filesize
412B
MD59f4d21b4a55652be52fddb10e9b3b281
SHA17613a3fe698629f0a807c68d519c19cdd4a167c2
SHA25642a2f22ac8fbcfef287dd938122cc526c2edbf1ac6c5c6a3cc5792c19c1cb4d7
SHA512bbca285894fa5b80e7206a42141fd635d34e4a299b1e4694b45ad2772a25656cde8d8f45d6b230f25fa83d2533af334934a4a99e35a019fb790979adc5aaff66