Overview

overview

10

Static

static

6

181c5b2462...12.apk

android-9-x86

10

181c5b2462...12.apk

android-10-x64

10

181c5b2462...12.apk

android-11-x64

10

vk_dex.apk

android-9-x86

vk_dex.apk

android-10-x64

vk_dex.apk

android-11-x64

Analysis

  • max time kernel
    3470272s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    30-12-2023 12:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    181c5b246238ce6dd468dde332a33212.apk

  • Size

    2.8MB

  • MD5

    181c5b246238ce6dd468dde332a33212

  • SHA1

    efda29b74d3217a71574998741fa6705fe94f83e

  • SHA256

    7816da4e76ac01e372b8ffa022e13457b6202f3db0984a6235a894eae4f72bd4

  • SHA512

    edc2436f0793c4db477d079f82b4df142ce59a3a959efea6fe1614c118c182fb8896508ad17932a04059bd1647376017c19ff3869026a2df9c8d4af334659ad7

  • SSDEEP

    49152:JqfI9BGcQMHuysxApPONxwJur2TicdtfAq5WtsyHaucV1dtX1Oi6kds9IqodYeW7:JqfI9B75sypPOFrBYpAqk17czrX1IkdS

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.jvxyxzzu.ybkrznc
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    PID:4645

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.jvxyxzzu.ybkrznc/code_cache/secondary-dexes/base.apk.classes1.zip
    Filesize

    817KB

    MD5

    74e0841db93ee2de49fbed0632f74784

    SHA1

    abcdae1c558232c5f2ea69c95e0e2181cdbea2b9

    SHA256

    9b36edf90f9d61a20d226b6cd3f7c3f2bb93ea4e627c19ef63e5ce0c7bad4752

    SHA512

    de24c9cf79406c8e1d4a359a34e4ea7d114e47546ca835f503491f7689847da3a9639668896dca16c35aa564b072d6162993500f264d34ea81c54df26d8cfeda

    Download Submit

  • /data/user/0/com.jvxyxzzu.ybkrznc/code_cache/secondary-dexes/tmp-base.apk.classes5765235549564604938.zip
    Filesize

    78KB

    MD5

    41bc765f522901d0ee0e56f6b84d676f

    SHA1

    1d9d2a6c481e85e6897ef264890289708021599c

    SHA256

    d6b011b74ea90a8a257e2b41d1aa043c2bbe208d1a6ca7cb43d723fac138a2c2

    SHA512

    f513e99f476ec4cd15d65699d300f0913222b7dd26e627f3825cfcbdfcfad4b6c296704db127f80c6f30e93ce894a5d03d78d9f3b5b4cbac228d010af7053cbc

    Download Submit