Overview

overview

10

Static

static

7

49.apk

android-9-x86

10

49.apk

android-10-x64

10

49.apk

android-11-x64

1

Analysis

  • max time kernel
    1835010s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system
  • submitted
    05-08-2022 09:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    49.apk

  • Size

    8.1MB

  • MD5

    499da9f8c6d8a2437f51637bc73fcdbe

  • SHA1

    069b538392a6c3199cf5e503ce5d3f9cf60fe7ac

  • SHA256

    7e95e9a306886dadbae68c586bf19eec6903bac15290fd60c47d29a2e3cbf047

  • SHA512

    aed3b8bf2756173c292529b70976f604d204d723ce63186275020198871011bc072b4db7918e586883687f1b8f1981529880d44d59a7cfffd791942b2e3358c7

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.tunnel.voyage
    1⤵
    • Loads dropped Dex/Jar
    PID:5951
    • /bin/sh /data/user/0/com.tunnel.voyage/app_torfiles/tor -f /data/user/0/com.tunnel.voyage/app_torfiles/torrc __OwningControllerProcess 5951
      2⤵
        PID:6145

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.tunnel.voyage/app_DynamicOptDex/oat/sbc.json.cur.prof
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
      Filesize

      2.6MB

      MD5

      cf884d9a707d3edc6a6772be9f06a7ae

      SHA1

      73be0e36990568c3cdc06a76795b462b4d452870

      SHA256

      5fe5ec0ceef2f40c92f846634a588fb2300a45350904580b501c84df95e570fb

      SHA512

      d8388c1f2bd088b568e5fb99f5d581910e4b0fb684a7a7eb04bb67a3f6f6d565cbfa44ce93f7db0586b8b74eca00640d3c1b77b33a0bee77f9d35b5c5ed521e8

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
      Filesize

      2.6MB

      MD5

      a907ed71028a2b0ddfca184602567ff6

      SHA1

      5707e2cbc14f8acfee1b27ac5e8d8b475d3c54d0

      SHA256

      40369032ee050fb3d966176ab836740751a13c265025ba60da0284bf2b2cf763

      SHA512

      ee9e7c72dbce55d5ed481fc01b4ac81d59c87c17a8141b10b157859e2939b26dd027430f77f212688acba142322bc77640b71d030b50104899e3d307960ab2d9

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_DynamicOptDex/sbc.json
      Filesize

      2.6MB

      MD5

      a907ed71028a2b0ddfca184602567ff6

      SHA1

      5707e2cbc14f8acfee1b27ac5e8d8b475d3c54d0

      SHA256

      40369032ee050fb3d966176ab836740751a13c265025ba60da0284bf2b2cf763

      SHA512

      ee9e7c72dbce55d5ed481fc01b4ac81d59c87c17a8141b10b157859e2939b26dd027430f77f212688acba142322bc77640b71d030b50104899e3d307960ab2d9

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_torfiles/.tor/control_auth_cookie
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_torfiles/geoip
      Filesize

      3.7MB

      MD5

      da86c56d98ea812ce6ab42691e4d1197

      SHA1

      e3c910f3b2a6c916c7be33a943091ef57048b72c

      SHA256

      9f65eab86508224b41cbf319314c070f33fdecb250d17247da83ab7b4d436159

      SHA512

      62095ef018a1e2664b380056141e54f224458727229b309f101b0961616a0e5feeaf8428b9b788df4a1408304a46f6d38bcaf9edda770dd6752251995ae49235

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_torfiles/geoip6
      Filesize

      2.1MB

      MD5

      18625900e4f9b58af0db8b4a621058df

      SHA1

      e8bd5b2e6554c27f718f1222667c09680d75f799

      SHA256

      296911c0f69a26b5fd65f4552f6a141d6cdbb5979f62b8b7db28e7b97e0698f5

      SHA512

      347006c25eeac5b5cccecd09dafe814cec569e4741c67d3a35dc47d605ef2110adbc0a4e689077c80216059a6a66454bfa525e3cb6fe5b03a781f1f3b8fac6c8

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_torfiles/tor
      Filesize

      6.5MB

      MD5

      3ffe7e540a5be82f50eccd51dde09828

      SHA1

      e3d9711da7afed4bc89326d3bf80bbfcad7dc5cc

      SHA256

      805e8995ae913e691ff3e4b6a5fce1c7d11860940ace43a5187a1f548ddcb24b

      SHA512

      8679cb1df0f82a830e952d0e9628967839dc7a96c178c481dac96ab01c815dec107b4f1b22aa7481aa0071bff9c541d9cb559a0a7268782e3a75874fbbaba7cc

      Download Submit
    • /data/user/0/com.tunnel.voyage/app_torfiles/torrc
      Filesize

      99B

      MD5

      a5537c6e54c265bd4a318bdc057b604c

      SHA1

      00e834c03f908659e5beeb57a0828b22c2d09acc

      SHA256

      c0fbdadf36a2b1ef0b4287b66d3a94312915faf5f10b0861e494ea6c40b62c2e

      SHA512

      062a02b944e990ae4871b53e83fdf15322140f4c50df286488dc1c7ddad423708d4c4eeb97af7518c4bdb54547ee1188822cfacd4ca3ed7032961625a251cac9

      Download Submit