Analysis
- max time kernel
154s - max time network
150s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
- submitted
27/01/2024, 01:55
General
- Target 78fa950df8e85e4866fbd9536567d1cd.apk
- Size 3.0MB
- Sample240127-ccl3zaaha3
- SHA256 20f45f1e7206b07876501aa829adae3e54b3620e733e7b8fee04c448078143b6
Score
10/10
Malware Config
Signatures
- Hydra
Android banker and info stealer.
- Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
- Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Reads information about phone network operator.
Processes
-
com.uewmuueh.nxoqdhf1⤵
- Makes use of the framework's Accessibility service
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
tmp-base.apk.classes8910163871126745906.zip
base.apk.classes1.zip