Analysis
- max time kernel
3487864s - max time network
158s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
- submitted
03/01/2024, 15:12
General
- Target 61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b.apk
- Size 7.7MB
- Sample240103-slaz3ahhd5
- SHA256 61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b
Score
10/10
Malware Config
Signatures
- Hydra
Android banker and info stealer.
- Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Reads information about phone network operator.
Processes
-
wdc.rejg9r45.lzeg9rj1⤵
- Makes use of the framework's Accessibility service
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
aLQPicJi.fz
geoip
aLQPicJi.fz