Overview

overview

10

Static

static

7

b8285714c6...9b.apk

android-9-x86

10

b8285714c6...9b.apk

android-10-x64

10

b8285714c6...9b.apk

android-11-x64

10

disney.js

windows7-x64

1

disney.js

windows10-2004-x64

1

googlephoto.js

windows7-x64

1

googlephoto.js

windows10-2004-x64

1

hbomax.js

windows7-x64

1

hbomax.js

windows10-2004-x64

1

netflix.js

windows7-x64

1

netflix.js

windows10-2004-x64

1

web.js

windows7-x64

1

web.js

windows10-2004-x64

1

Analysis

  • max time kernel
    3106949s
  • max time network
    94s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    03-08-2023 02:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b8285714c61aabe540aa39221cd2dadba04a389919e554d531604d8bded2359b.apk

  • Size

    4.1MB

  • MD5

    0d37a9b5ae1454c3fcbf379963d38b5d

  • SHA1

    c5315746876ce5a7f9edd9280ea426fa1b2cc8de

  • SHA256

    b8285714c61aabe540aa39221cd2dadba04a389919e554d531604d8bded2359b

  • SHA512

    abe10446992c4d599b366f7bf02a122f81f2fed614b16983b1d1aa6dcfc57867be5e5dd464ceed49b057bf0535c054086c332394a43fa14c74346a7e08b8d84e

  • SSDEEP

    98304:nwsTYmUzC4rZfYdfGaCl2gzARpSOCyNx9vLrqmp:NPGjaCl2Bp5Tb9vXqmp

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Hydra payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.such.joy
    1⤵
    • Loads dropped Dex/Jar
    PID:4937

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.such.joy/app_DynamicOptDex/CSUSr.json
    Filesize

    1.9MB

    MD5

    269818a613e8c54603408cd6cacff76c

    SHA1

    d13b9f625ba0a006cfbca3c313ca9a2b57eb267c

    SHA256

    238b95abe6597582674aa66f9383179860a5a29aac6e6d6ffe6a3ea03cfbdbbc

    SHA512

    ea6309c040a7318401958ffcfd8a1227fa2ad2c766f8f33fca03c0304d1b1539da11a0bb448b3028d82955bfe2181ff2005021ac4b63064721d6f5ad7047688a

    Download Submit

  • /data/user/0/com.such.joy/app_DynamicOptDex/CSUSr.json
    Filesize

    5.0MB

    MD5

    33c7c9950172a836259776101bcac096

    SHA1

    f5c8598a28eec0bebf7e07fc23512c89b30472d6

    SHA256

    dc302c0fd08473b5916fc3d26a8035df332391d9535da610c52fcb2ec48d55ef

    SHA512

    75b0ed13a94fabe307c48971cf13150c9c3ab9f4c4128bcb1d71519b4d2aff2221f72e7174970b468ff00b09ad9c9ac613e6de586668fc6f9ed085366b35286d

    Download Submit

  • /data/user/0/com.such.joy/shared_prefs/pref_name_setting.xml
    Filesize

    131B

    MD5

    7345be375d0cad0eb637c1839471ba6a

    SHA1

    e0a7e4c97a13156f2b80b0c92b92429fba2a8e99

    SHA256

    82be48a9ad6e61cfa69c4dc864c931968d2d52b5e07b2f984eb23f8ab40f2b48

    SHA512

    f5fbc5fbd9b6cad639fc0ce10feec18889a10835022ed14ed1df27d547314de29f87728d49527e19b3d3d136612c324a5214dcac489dd4f1ec3feed0930d4b2c

    Download Submit