Analysis
-
max time kernel
2211545s -
max time network
168s -
platform
android_x64 -
resource
android-x64-20220621-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system -
submitted
09-08-2022 18:12
Static task
static1
Behavioral task
behavioral1
Sample
af2a369aaacd253f2265b1a73748c47946c4a0bc82a56f073f696630daaef44b.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
af2a369aaacd253f2265b1a73748c47946c4a0bc82a56f073f696630daaef44b.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
af2a369aaacd253f2265b1a73748c47946c4a0bc82a56f073f696630daaef44b.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
af2a369aaacd253f2265b1a73748c47946c4a0bc82a56f073f696630daaef44b.apk
-
Size
3.2MB
-
MD5
438313a34c7d4dd7542930f6abade1d6
-
SHA1
f8baf32d3214cd35756ce2f753a9e7cdb80e6ea4
-
SHA256
af2a369aaacd253f2265b1a73748c47946c4a0bc82a56f073f696630daaef44b
-
SHA512
54909a117fc5296ed3d301ca498c03caadfa8bb049922da7c09cd17db3e506d91752ea8ba429bd0a84438d9079e6d7bfb4e37306578d0483cb0292c21550f305
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra payload 1 IoCs
resource yara_rule behavioral2/memory/5777-0.dex family_hydra -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.decide.across/app_DynamicOptDex/Sr.json 5777 com.decide.across -
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Reads information about phone network operator.
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD54ea8ace328f08f6c6b92ebc813cd1fd4
SHA1c89d5c6e642f48bbbcefe3b88717fb31f1cac370
SHA2563cdc27ce5e68935ece7770690d175077121ed45466faa2fddef3a99a84ffd23e
SHA512ecf96eec09de05754c7f9bc06151507f92ef4bc106b024023cb7f3fec6ab5a2cf4bc792ce8efa302d193ce108fd96973de411900f4c15eafb8fbba4b611bc784
-
Filesize
5.0MB
MD56da5de40c9cd4f83a2eee2483fb2c048
SHA15868ff2850e13031a3652151b2bd1bfe5605d029
SHA2569d9c3b58cacb2af47ef6b22572106ca3742c1fa35f60a2a00052e21f7b249d8e
SHA5122771d7f54941a4dda220aa343c33ac0df5692e1d238562eee60618f64cb68008dfcf3de9e79704b8362feb4dc40dd28c840495ca9b1de89d4f163901130a5f2c