Overview

overview

10

Static

static

6

716003c305...d9.apk

android-9-x86

10

716003c305...d9.apk

android-10-x64

10

716003c305...d9.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    716003c3056c3d8483a1fb469596b7d9

  • Size

    3.1MB

  • Sample

    240124-eex95aabb2

  • MD5

    716003c3056c3d8483a1fb469596b7d9

  • SHA1

    cee5c812eaec44015c844718e211a162ce497f49

  • SHA256

    adca984304f23557bbab99360a86e331ac018d15c9fbdbcb286c9f7ecf2f53df

  • SHA512

    98b2b8149f0e5b45980e9439e1f1e01ec568048aad1bc08680be178b768b945ec230508dec4ff5d58e551c1a1958b3cd4ee6c044e4d3df8e17170be879d67954

  • SSDEEP

    49152:xKq+vZPoStSYCPXc8Z4jpnauk82apEUhOVZEHcafxYx0MG0fd/D51:xgoStoMBjpnHR2apEBZWc8xYxLhX

Score
10/10
hydraandroidbankerinfostealertrojan

Malware Config

Targets

    • Target

      716003c3056c3d8483a1fb469596b7d9

    • Size

      3.1MB

    • MD5

      716003c3056c3d8483a1fb469596b7d9

    • SHA1

      cee5c812eaec44015c844718e211a162ce497f49

    • SHA256

      adca984304f23557bbab99360a86e331ac018d15c9fbdbcb286c9f7ecf2f53df

    • SHA512

      98b2b8149f0e5b45980e9439e1f1e01ec568048aad1bc08680be178b768b945ec230508dec4ff5d58e551c1a1958b3cd4ee6c044e4d3df8e17170be879d67954

    • SSDEEP

      49152:xKq+vZPoStSYCPXc8Z4jpnauk82apEUhOVZEHcafxYx0MG0fd/D51:xgoStoMBjpnHR2apEBZWc8xYxLhX

    Score
    10/10
    hydrabankerinfostealertrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks