Analysis
-
max time kernel
1835721s -
max time network
123s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
15-12-2023 12:16
General
-
Target
08362_Video_Oynat.apk
-
Size
4.5MB
-
MD5
924f353957c8c786a2eeb6422a1bbe3b
-
SHA1
7885e711692cfa73fcf165125593bfac3920432e
-
SHA256
5b9049c392eaf83b12b98419f14ece1b00042592b003a17e4e6f0fb466281368
-
SHA512
2a93593f79e61dfdc8feb7762f03c0924ebb141f06d71d5d80067fd8fa87d1589b936c89c3031dcc1dbef5c21384578cbf093d862748bdc8529bf044e58005f8
-
SSDEEP
98304:FN+oQuYD9mydXOTrinkiclo30C683kGe3whpJvHFyxrCT:FyuqsfEjOg0tYkrgpFyNCT
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Reads information about phone network operator.
Processes
-
com.pmmynubv.nommztx1⤵
- Makes use of the framework's Accessibility service
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD57ac3aed143bfa03e5695d03c13a7e88f
SHA1d0114c3b4035301aedc4c03d47df89b4962c978a
SHA256c3221d16238a753a1015d7664a9462af54bb5fe7fa18c357aa68d7a9f2d7bd30
SHA51248f98f06bfc69f19beed7a43b8c35f4ec7715b718955f5bf45848dab58a4225b0608248cb94e065e49515df651d651d86255e3be3a154db2d4928529bbc98567
-
Filesize
885KB
MD5126836ec1431cac082ef42dddba4d679
SHA11ec85e421b04152d8819fff5d9b78efe1ded23ed
SHA256d0d704ace35b0190174c11efa3fef292e026391677ff9dc10d2783b4cfe7f961
SHA512e18a38a1526d30bb3138aa2fe238923f41149b7391ce7dc2e845f7e63f55e3f1d77b74c48cfc3a397b276b889806a4981c0305018652ffb74c0e988d7aadd979