Overview

overview

10

Static

static

10

PosteID.apk

android-9-x86

10

PosteID.apk

android-10-x64

10

PosteID.apk

android-11-x64

10

Resubmissions

19/11/2023, 05:34

231119-f9h95agh87

07/05/2023, 09:14

230507-k7c3jsdf3710

Sharing

Copy URL Twitter E-mail

General

  • Target
    PosteID.apk
  • Size 1.7MB
  • Sample230507-k7c3jsdf37
  • SHA256 03933fedda0104be2fdfc26a8f205657989b7e12a5446b2e754562a4abccd956
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
hydraandroidbankerinfostealertrojan

Malware Config

Extracted

Family

  • hydra

C2

  • http://www.firrpxxxcjnnskk.xyz

Targets

    • Target
      PosteID.apk
    • Size 1.7MB
    • SHA256 03933fedda0104be2fdfc26a8f205657989b7e12a5446b2e754562a4abccd956
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    hydrabankerinfostealertrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Makes use of the framework's Accessibility service.

    • Requests enabling of the accessibility settings.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks