Overview

overview

10

Static

static

7

golgol.apk

android-9-x86

1

golgol.apk

android-10-x64

10

golgol.apk

android-11-x64

10

Analysis

  • max time kernel
    1656825s
  • max time network
    78s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system
  • submitted
    03/08/2022, 08:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    golgol.apk
  • Size 8.1MB
  • Sample220803-j2b3maghc7
  • SHA256 7e95e9a306886dadbae68c586bf19eec6903bac15290fd60c47d29a2e3cbf047
  • MD5 SHA1 SHA512
Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tunnel.voyage
    1⤵
    • Loads dropped Dex/Jar
    PID:6294
    • /bin/sh /data/user/0/com.tunnel.voyage/app_torfiles/tor -f /data/user/0/com.tunnel.voyage/app_torfiles/torrc __OwningControllerProcess 6294
      2⤵
        PID:6718

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          sbc.json
          • Path /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
          • Size 2.6MB
          • SHA256 5fe5ec0ceef2f40c92f846634a588fb2300a45350904580b501c84df95e570fb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          sbc.json
          • Path /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
          • Size 2.6MB
          • SHA256 40369032ee050fb3d966176ab836740751a13c265025ba60da0284bf2b2cf763
          • MD5 SHA1 SHA512 SSDEEP
          Download

          sbc.json
          • Path /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
          • Size 2.6MB
          • SHA256 40369032ee050fb3d966176ab836740751a13c265025ba60da0284bf2b2cf763
          • MD5 SHA1 SHA512 SSDEEP
          Download

          geoip
          • Path /data/user/0/com.tunnel.voyage/app_torfiles/geoip
          • Size 3.7MB
          • SHA256 9f65eab86508224b41cbf319314c070f33fdecb250d17247da83ab7b4d436159
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          geoip6
          • Path /data/user/0/com.tunnel.voyage/app_torfiles/geoip6
          • Size 2.1MB
          • SHA256 296911c0f69a26b5fd65f4552f6a141d6cdbb5979f62b8b7db28e7b97e0698f5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          tor
          • Path /data/user/0/com.tunnel.voyage/app_torfiles/tor
          • Size 6.5MB
          • SHA256 805e8995ae913e691ff3e4b6a5fce1c7d11860940ace43a5187a1f548ddcb24b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          torrc
          • Path /data/user/0/com.tunnel.voyage/app_torfiles/torrc
          • Size 99B
          • SHA256 c0fbdadf36a2b1ef0b4287b66d3a94312915faf5f10b0861e494ea6c40b62c2e
          • MD5 SHA1 SHA512
          Submit Download