Overview

overview

10

Static

static

6

7aea29658a...ae.apk

android-9-x86

10

7aea29658a...ae.apk

android-10-x64

10

7aea29658a...ae.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7aea29658ad2b4aa603442ab56ff391d0d9b30f3996c8fafb6e10d50bc0ab7ae

  • Size

    3.7MB

  • Sample

    231220-b7djmsacc4

  • MD5

    645e0e45a9f31643af73cafb6ade5229

  • SHA1

    90ca44e4a382bb8ce2567b0606f6cd38e6b1c087

  • SHA256

    7aea29658ad2b4aa603442ab56ff391d0d9b30f3996c8fafb6e10d50bc0ab7ae

  • SHA512

    5cf79cc779c64d0745cf278079ad20680e6595378ece72d1496d369484f18a42ac4390ca2b8f9ed7217e1b33af4419eb9ae4dbd31776eed5152c8b0d373b8c27

  • SSDEEP

    98304:mOHNetf++GWwfXgbSP8k38Ug55Cgy/DJ0LMheUi6LjL/:B8f9GJXBP8W8Uk5SbJ0LMcCL/

Score
10/10
hydraandroidbankerinfostealertrojan

Malware Config

Targets

    • Target

      7aea29658ad2b4aa603442ab56ff391d0d9b30f3996c8fafb6e10d50bc0ab7ae

    • Size

      3.7MB

    • MD5

      645e0e45a9f31643af73cafb6ade5229

    • SHA1

      90ca44e4a382bb8ce2567b0606f6cd38e6b1c087

    • SHA256

      7aea29658ad2b4aa603442ab56ff391d0d9b30f3996c8fafb6e10d50bc0ab7ae

    • SHA512

      5cf79cc779c64d0745cf278079ad20680e6595378ece72d1496d369484f18a42ac4390ca2b8f9ed7217e1b33af4419eb9ae4dbd31776eed5152c8b0d373b8c27

    • SSDEEP

      98304:mOHNetf++GWwfXgbSP8k38Ug55Cgy/DJ0LMheUi6LjL/:B8f9GJXBP8W8Uk5SbJ0LMcCL/

    Score
    10/10
    hydrabankerinfostealertrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Hydra payload

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v13

Tasks