Overview

overview

10

Static

static

7

49.apk

android-9-x86

10

49.apk

android-10-x64

10

49.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49.apk

  • Size

    8.1MB

  • Sample

    220805-llgpaahgh7

  • MD5

    499da9f8c6d8a2437f51637bc73fcdbe

  • SHA1

    069b538392a6c3199cf5e503ce5d3f9cf60fe7ac

  • SHA256

    7e95e9a306886dadbae68c586bf19eec6903bac15290fd60c47d29a2e3cbf047

  • SHA512

    aed3b8bf2756173c292529b70976f604d204d723ce63186275020198871011bc072b4db7918e586883687f1b8f1981529880d44d59a7cfffd791942b2e3358c7

Score
10/10
hydraandroidbankerinfostealertrojan

Malware Config

Targets

    • Target

      49.apk

    • Size

      8.1MB

    • MD5

      499da9f8c6d8a2437f51637bc73fcdbe

    • SHA1

      069b538392a6c3199cf5e503ce5d3f9cf60fe7ac

    • SHA256

      7e95e9a306886dadbae68c586bf19eec6903bac15290fd60c47d29a2e3cbf047

    • SHA512

      aed3b8bf2756173c292529b70976f604d204d723ce63186275020198871011bc072b4db7918e586883687f1b8f1981529880d44d59a7cfffd791942b2e3358c7

    Score
    10/10
    hydrabankerinfostealertrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Hydra payload

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks