General
- Target 56520eabdbd97a436868305176e2d1ba
- Size 3.0MB
- Sample240112-ngrpssehdl
- SHA256 1c2695d5314b46ab77ff6ea879318161310d792f4e5339926bb0aa5dd5421bf6
Score
10/10
Malware Config
Targets
-
- Target 56520eabdbd97a436868305176e2d1ba
- Size 3.0MB
- SHA256 1c2695d5314b46ab77ff6ea879318161310d792f4e5339926bb0aa5dd5421bf6
Score10/10-
Hydra
Android banker and info stealer.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Reads information about phone network operator.