Resubmissions
31-08-2022 14:33
220831-rw9eyafegp 1028-07-2022 07:03
220728-hvqrrsdgbl 1025-07-2022 22:23
220725-2awxtsbdam 10Analysis
-
max time kernel
1134483s -
max time network
310s -
platform
android_x64 -
resource
android-x64-20220621-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system -
submitted
28-07-2022 07:03
Static task
static1
Behavioral task
behavioral1
Sample
Google_chrome.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
Google_chrome.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
Google_chrome.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
Google_chrome.apk
-
Size
2.5MB
-
MD5
2cd5f2c9f3bf4b0070479446a6c38597
-
SHA1
f3efb1aa48d6c6e5c75d977c3b2712ee862505cb
-
SHA256
734605a1f30870dd8fb211c8afd53afa71b3fcb138094f589098d799e589e99b
-
SHA512
75a958e097472b88d124c1ce98cbdc3255bca13ddbb1784def9d98ab2fab965e3281777378af08b17f13e64c887a5496832c7cbc95cfd47ce0af382e90a186c6
Malware Config
Extracted
hydra
https://notpro.top
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra payload 1 IoCs
resource yara_rule behavioral2/memory/5036-0.dex family_hydra -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.spring.birth/app_DynamicOptDex/eqs.json 5036 com.spring.birth
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD50ed0faa66716f9a81c675b68f8398f1e
SHA13528062265d1fe1e9c443f5264b45e763d476399
SHA256593ec8376adf97487a6f8115b1bb0b47e0891a1020265da569457fb275f89a14
SHA512bda56c78c7386773392cc60d0efc69550d4e262b7f615f4e13226beaaac56d23c0c9fda88b68b870a4b4c0b7420101102f04ce59fb6c8144555b118d15a02e33
-
Filesize
3.6MB
MD59a6058c280f8625e6fbcdaa29e3bd2c0
SHA144c031dba6a194cccf12f3c3fdd7fafd0eddd656
SHA25612e8a559756893eda5fb2b6eb4ea7080acf1469738edad6ab9c82bda80fa456d
SHA512ce0fc5383e3f1ef740ad06598e8c6dccd99bc80f3a44d9bba0b0f5dac9aae4ebf84c269eb26bb0538da1535e8614cdfe8e515d8f4b5ca793fc3bc5689dd7ed9d