Overview

overview

10

Static

static

6

3154684c41...48.apk

android-9-x86

10

3154684c41...48.apk

android-10-x64

10

3154684c41...48.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3154684c4192a1ae7a00f9f61d3024e2d25a85508c512094a771f878c3130848.apk

  • Size

    8.4MB

  • Sample

    231214-qwh3bafdf8

  • MD5

    ad53ff0a6090ab4904bc589ebbf64bb0

  • SHA1

    4caa507ad88af628be9d5e53a4dcbfba34c4351e

  • SHA256

    3154684c4192a1ae7a00f9f61d3024e2d25a85508c512094a771f878c3130848

  • SHA512

    df103e1d1ba138b6a87dd4c10c9de954db2732627d32ff3cbb821ee87cbfcbbc52b3123070bd3304f6f595f064fb28b581694788191ff6ec8371e11be40067b3

  • SSDEEP

    196608:k1aEShpFlM17N317z391qgpyNP6QDWx0RiQdyjynFAL9mTO:k1ahnHM17pFz3DBp2P6cWabyj40IO

Score
10/10
hydraandroidbankerevasioninfostealerstealthtrojan

Malware Config

Targets

    • Target

      3154684c4192a1ae7a00f9f61d3024e2d25a85508c512094a771f878c3130848.apk

    • Size

      8.4MB

    • MD5

      ad53ff0a6090ab4904bc589ebbf64bb0

    • SHA1

      4caa507ad88af628be9d5e53a4dcbfba34c4351e

    • SHA256

      3154684c4192a1ae7a00f9f61d3024e2d25a85508c512094a771f878c3130848

    • SHA512

      df103e1d1ba138b6a87dd4c10c9de954db2732627d32ff3cbb821ee87cbfcbbc52b3123070bd3304f6f595f064fb28b581694788191ff6ec8371e11be40067b3

    • SSDEEP

      196608:k1aEShpFlM17N317z391qgpyNP6QDWx0RiQdyjynFAL9mTO:k1ahnHM17pFz3DBp2P6cWabyj40IO

    Score
    10/10
    hydrabankerevasioninfostealerstealthtrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks