Overview

overview

10

Static

static

10

787d01d67c...b3.apk

android-11-x64

10

787d01d67c...b3.apk

android-13-x64

10

787d01d67c...b3.apk

android-9-x86

10

Resubmissions

12/12/2023, 15:01

231212-sd3ecafaan10

11/12/2023, 14:18

231211-rmn3mshaam10

Analysis

  • max time kernel
    1586296s
  • max time network
    48s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231211.1-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231211.1-enlocale:en-usos:android-13-x64system
  • submitted
    12/12/2023, 15:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    787d01d67c2a0d4df7f100c8550e92b3.apk
  • Size 5.6MB
  • Sample231212-sd3ecafaan
  • SHA256 496e20eb04c7fb0fd64a1d3b519cb2515656e0486253f376176fdc996efebd16
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.ahzmpwhp.mpjvegk
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    PID:4278

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        xvg6Fh1Q.insta
        • Path /data/user/0/com.ahzmpwhp.mpjvegk/app_apkprotector_dex/xvg6Fh1Q.insta
        • Size 61KB
        • SHA256 5a563e44347f8b453213c03fcb3bea1a98b53a30c0839bfe06aaf0b08a1b0aa2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xvg6Fh1Q.insta
        • Path /data/user/0/com.ahzmpwhp.mpjvegk/app_apkprotector_dex/xvg6Fh1Q.insta
        • Size 1.2MB
        • SHA256 87a9505f964c5bc6287672ef2a3b05ee8b1d067d44484fa79ed7294840833bd4
        • MD5 SHA1 SHA512 SSDEEP
        Download

        geoip
        • Path /data/user/0/com.ahzmpwhp.mpjvegk/app_torfiles/geoip
        • Size 3.7MB
        • SHA256 9f65eab86508224b41cbf319314c070f33fdecb250d17247da83ab7b4d436159
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        geoip6
        • Path /data/user/0/com.ahzmpwhp.mpjvegk/app_torfiles/geoip6
        • Size 2.1MB
        • SHA256 296911c0f69a26b5fd65f4552f6a141d6cdbb5979f62b8b7db28e7b97e0698f5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tor
        • Path /data/user/0/com.ahzmpwhp.mpjvegk/app_torfiles/tor
        • Size 2.7MB
        • SHA256 e73fafe149ec2e82f2fb9e1d09ddb1743f45de46f3e8338e0e5546d0f1334118
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        torrc
        • Path /data/user/0/com.ahzmpwhp.mpjvegk/app_torfiles/torrc
        • Size 99B
        • SHA256 c0fbdadf36a2b1ef0b4287b66d3a94312915faf5f10b0861e494ea6c40b62c2e
        • MD5 SHA1 SHA512
        Submit Download