Overview

overview

10

Static

static

10

61e49ea8ac...4b.apk

android-9-x86

10

61e49ea8ac...4b.apk

android-10-x64

10

61e49ea8ac...4b.apk

android-11-x64

10

Analysis

  • max time kernel
    3487876s
  • max time network
    137s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    03-01-2024 15:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b.apk

  • Size

    7.7MB

  • MD5

    86a3403d7a9b5a70b5ab1074e6faea47

  • SHA1

    eed67e0b464ff00aa14e9122d618bf063f2156e5

  • SHA256

    61e49ea8ac3572e344c27742a2d53266df15266d0163470bbb56e5cd7ad78a4b

  • SHA512

    91b516f4cf76cd77c2e333506ce320ab1f6645c67d31b18a6e67c208831bb5870de05aacfd0834457c9418b5067bbc17f53a8e9afe5d274d05e31c389bd75f27

  • SSDEEP

    196608:LKWKndNMyQI4/FVjt/NMC1NC3lDWx0RiQdyjynFAL9z:OWKdNMyQfNVjMzWabyj40z

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • wdc.rejg9r45.lzeg9rj
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    PID:4518

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/wdc.rejg9r45.lzeg9rj/app_apkprotector_dex/aLQPicJi.fz
    Filesize

    25KB

    MD5

    2dcda8d507c36d4f8e8690c6f9125072

    SHA1

    dc978b2a64595b26ca076a3367fc2cb56232a954

    SHA256

    9c120be795f0ff15f0a188839a7749175ce0a5bf66f035a91567b82f2dd7c52b

    SHA512

    32cba95ec35b913a7476cf0ab672796dbf452c4fc1ffb3acf49ca4b6d3172e09e6852ac7ef6f7132a9e462234f85c275680cf73d1b6caf4a5000195bb7aebf0f

    Download Submit

  • /data/user/0/wdc.rejg9r45.lzeg9rj/app_apkprotector_dex/aLQPicJi.fz
    Filesize

    3.7MB

    MD5

    56448dccfc5e741906a3f341a8074529

    SHA1

    25b37c288294286857068096f08fcaabe5f0d15c

    SHA256

    5cbe8700ccfc399187ca8fa571a25247e60d9e0dba8ad885c414f1a572720482

    SHA512

    1e83161e5472b11df0ba39ac094be877157e06fb6d52044cfafb7d902a67c9de0ef9dcc49423ab2f1dac7011fd99e6d65e6f505a3c8a82b864820de0ca264592

    Download Submit

  • /data/user/0/wdc.rejg9r45.lzeg9rj/app_torfiles/torrc
    Filesize

    336B

    MD5

    32d528f3a74b2ae9240d83470f675d19

    SHA1

    0c8a08da3dca19d3a8700856f6782f400d685938

    SHA256

    26f162857107e648e9e2c6ca68239f09152ce0b2c82523cb81d72e4001331e0a

    SHA512

    026cab77f5c6b217f68abc58ec87fc96ee597090ccb6f17d07aed44a2c1b6b9fef1e300a095517e160ebc1d4a397e3b0caa13a8598c972c8486a2f3af0895ea4

    Download Submit