Overview

overview

10

Static

static

10

61e49ea8ac...4b.apk

android-9-x86

10

61e49ea8ac...4b.apk

android-10-x64

10

61e49ea8ac...4b.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b

  • Size

    7.7MB

  • Sample

    231223-wrxb2acbhq

  • MD5

    86a3403d7a9b5a70b5ab1074e6faea47

  • SHA1

    eed67e0b464ff00aa14e9122d618bf063f2156e5

  • SHA256

    61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b

  • SHA512

    91b516f4cf76cd77c2e333506ce320ab1f6645c67d31b18a6e67c208831bb5870de05aacfd0834457c9418b5067bbc17f53a8e9afe5d274d05e31c389bd75f27

  • SSDEEP

    196608:LKWKndNMyQI4/FVjt/NMC1NC3lDWx0RiQdyjynFAL9z:OWKdNMyQfNVjMzWabyj40z

Score
10/10
dogerathydraandroidbankerinfostealertrojan

Malware Config

Targets

    • Target

      61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b

    • Size

      7.7MB

    • MD5

      86a3403d7a9b5a70b5ab1074e6faea47

    • SHA1

      eed67e0b464ff00aa14e9122d618bf063f2156e5

    • SHA256

      61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b

    • SHA512

      91b516f4cf76cd77c2e333506ce320ab1f6645c67d31b18a6e67c208831bb5870de05aacfd0834457c9418b5067bbc17f53a8e9afe5d274d05e31c389bd75f27

    • SSDEEP

      196608:LKWKndNMyQI4/FVjt/NMC1NC3lDWx0RiQdyjynFAL9z:OWKdNMyQfNVjMzWabyj40z

    Score
    10/10
    hydrabankerinfostealertrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks