Analysis
-
max time kernel
2651052s -
max time network
160s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
-
submitted
10/01/2023, 23:26
General
-
Target
3971b2bbb2ce0491104c0cd834f929bdc0aa4a612a8cd4edaf17b9b9cbf1b915.apk
-
Size
2.1MB
-
MD5
6224051522f494907ccf147546344789
-
SHA1
d348a6160285ab2b17bfa4ab12fb671bd5a62719
-
SHA256
3971b2bbb2ce0491104c0cd834f929bdc0aa4a612a8cd4edaf17b9b9cbf1b915
-
SHA512
04be2363b8e0264d57c6b637e05b14338f62066fa3260a926091f0749780b5c754249ad350c4d97a0a133b682591412f043fe69f8c015fedefc08284e14e4071
-
SSDEEP
49152:AU108yB0ekNWLBSONPBOIesOHaTLVTdhZ:Ai08yBuNWBgr5Har
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Hydra payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Reads information about phone network operator.
Processes
-
com.sauce.awful1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
239KB
MD5f55b2706971c27e5154c8d180e5ce6ae
SHA1422d54046cd2ae7371d6c7cc962748a23898260d
SHA256df1be96165b0a15b6f4396aa7c6d0ced7e96b812360cd2d1cdff8f7a8e0fc77f
SHA5128e5d94a385954f56d82627a40f95fc4885c085a158a35f4afbd46a13dfc1e47f67924b88b1ed5ff131db323b5a9079d23b57465092483d0f04bdb3c20752ae4a
-
Filesize
574KB
MD54f7ca869e2a2aa71565ddd0213377ef4
SHA17d36e39122864983eefeae7acda4c5895571aefb
SHA256885da90d332750c7f2fef12a1fc61d9aae32a323b0bd13b2309bbc6ee3f221e5
SHA51270097ab3164541abeb0aa661c7d92a1d4fd1f1b5deb7b605a5e510d7bfd84622f143305846fc6b31be0e5d7015bb56eca7fbf6063e84d840b7cd3bd07a4f500f
-
Filesize
131B
MD593e8ea5fba694a4909548e93068b4d3f
SHA1d6324dc803948330b0fdf9a3158b413639167369
SHA256440b105aefdc4ca9312154e90b52346656b504fa285db54c38cf53882d5d1c1b
SHA512606f0beed4eb1a3f0adeff02e53d8a54dd749004bdb32db2137c60042b804c9e56b72caf597c0e394f81da77a46d2da3c2b73d079dc97ba4c5772437cb7aa149