Overview

overview

10

Static

static

7

golgol.apk

android-9-x86

1

golgol.apk

android-10-x64

10

golgol.apk

android-11-x64

10

Analysis

  • max time kernel
    1656967s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system
  • submitted
    03/08/2022, 08:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    golgol.apk
  • Size 8.1MB
  • Sample220803-j2b3maghc7
  • SHA256 7e95e9a306886dadbae68c586bf19eec6903bac15290fd60c47d29a2e3cbf047
  • MD5 SHA1 SHA512
Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra payload 2 IoCs
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tunnel.voyage
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    PID:4874

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        sbc.json
        • Path /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
        • Size 2.6MB
        • SHA256 5fe5ec0ceef2f40c92f846634a588fb2300a45350904580b501c84df95e570fb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sbc.json
        • Path /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
        • Size 2.6MB
        • SHA256 40369032ee050fb3d966176ab836740751a13c265025ba60da0284bf2b2cf763
        • MD5 SHA1 SHA512 SSDEEP
        Download

        sbc.json
        • Path /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
        • Size 2.6MB
        • SHA256 40369032ee050fb3d966176ab836740751a13c265025ba60da0284bf2b2cf763
        • MD5 SHA1 SHA512 SSDEEP
        Download

        geoip
        • Path /data/user/0/com.tunnel.voyage/app_torfiles/geoip
        • Size 3.7MB
        • SHA256 9f65eab86508224b41cbf319314c070f33fdecb250d17247da83ab7b4d436159
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        geoip6
        • Path /data/user/0/com.tunnel.voyage/app_torfiles/geoip6
        • Size 2.1MB
        • SHA256 296911c0f69a26b5fd65f4552f6a141d6cdbb5979f62b8b7db28e7b97e0698f5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tor
        • Path /data/user/0/com.tunnel.voyage/app_torfiles/tor
        • Size 6.5MB
        • SHA256 805e8995ae913e691ff3e4b6a5fce1c7d11860940ace43a5187a1f548ddcb24b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        torrc
        • Path /data/user/0/com.tunnel.voyage/app_torfiles/torrc
        • Size 99B
        • SHA256 c0fbdadf36a2b1ef0b4287b66d3a94312915faf5f10b0861e494ea6c40b62c2e
        • MD5 SHA1 SHA512
        Submit Download