Overview

overview

10

Static

static

6

804a18c229...e6.apk

android-9-x86

10

804a18c229...e6.apk

android-10-x64

10

804a18c229...e6.apk

android-11-x64

10

vk_dex.apk

android-9-x86

vk_dex.apk

android-10-x64

vk_dex.apk

android-11-x64

Analysis

  • max time kernel
    154s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    29-01-2024 16:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    804a18c229614c92d0be806056ff8fe6.apk

  • Size

    3.2MB

  • MD5

    804a18c229614c92d0be806056ff8fe6

  • SHA1

    c91f728bed9faa15223744e3e8bb859d9c6f624a

  • SHA256

    45598745a90bac7335e21583bb5ee09e72a5beb47ab1d45f0ba3fdd0ddf2868b

  • SHA512

    d4f6d44b9068216606a823e8f210b490d2045c95e40118fbe50fb347089d04694824c516a940ea0420f8f7c936c9d6bc35c4b7a56a2f33055031f32e800e1737

  • SSDEEP

    98304:xEGhv1Jw1viCDMe0Y+0ivDDTrXDwufSQ3W38:x1h9JwhID3nfb3R

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.klfcspao.mqiahbd
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    PID:4987

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.klfcspao.mqiahbd/code_cache/secondary-dexes/tmp-base.apk.classes1807388625444035347.zip
    Filesize

    378KB

    MD5

    601b246f6f001424b1eaeed72f5da461

    SHA1

    0f3171df201ecee15ac7e28c537c6bd3d5a4331c

    SHA256

    76944e5e47149063360ac674e1e4ba78e904e2c8ba3aaf5fd7138c1de683bb8e

    SHA512

    a4750e8b83cb88b0b42209b453a8254d67cd42c59d50d7b5a0795c2f7ae0f3ae386c997a46732e69873be015932fb8e14deb9d485776864e015619c67ea79393

    Download Submit

  • /data/user/0/com.klfcspao.mqiahbd/code_cache/secondary-dexes/base.apk.classes1.zip
    Filesize

    902KB

    MD5

    135838d0eda1bbaa4150b05b19e65974

    SHA1

    680c865108d3f9288985392c44bb79bc72df932b

    SHA256

    070ae356eaa1e51f4cf16969f62286db8552f93c987d9a7db976f985d5e50aa8

    SHA512

    4cecd4575738dbb0d012db66deb6ec08748425d0567d160168325e55bff0dc7248196c049224fe5f25dc9d6e9c14accccfac497c8d157e8832e64983ccbc54fe

    Download Submit