Overview

overview

10

Static

static

6

86289bb19a...0d.apk

android-9-x86

10

86289bb19a...0d.apk

android-10-x64

10

86289bb19a...0d.apk

android-11-x64

10

vk_dex.apk

android-9-x86

vk_dex.apk

android-10-x64

vk_dex.apk

android-11-x64

Analysis

  • max time kernel
    149s
  • max time network
    142s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    01-02-2024 06:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    86289bb19a917a0032891efb2db1ab0d.apk

  • Size

    3.2MB

  • MD5

    86289bb19a917a0032891efb2db1ab0d

  • SHA1

    9da0b78087a74c23f7a960a343c83a2f9f5183c9

  • SHA256

    f47c788feac2cb7b395ad9b38949f29c88d01b6dd9c94dda87f2e243bb340bd3

  • SHA512

    0c679a87917aa29f87502895a6ba4d7567388297c2de054885702d48cfc3595106b521affb663b8809d4420b0dbeb013398621af84e2c5c201467045e01e42bb

  • SSDEEP

    98304:WDDYmdcR1vHxNKeZ+P7y2uXV1LRpJyvrXIKnch73W3c:WD8LvH6eZ+Ty2UV1Lr8cN31

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.ckygogqt.hlighrp
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    PID:4618

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ckygogqt.hlighrp/code_cache/secondary-dexes/base.apk.classes1.zip
    Filesize

    902KB

    MD5

    9e96f22213329cad93bbf14b5a7d2838

    SHA1

    b0a8881fc5b80c79d63fe306275b55f9230110ff

    SHA256

    9337b45d709ed0e8ed097f21a227e5bb1ef3eccb1b5836228b6eee3ffae7a49b

    SHA512

    d5ff651b1656d12a30ec683b3073a1a9b2faab4ac88d0e108cad04fabd782702c303a4e1cae1889664707aa8f7e925b8b7cba45571bb77db6815816f9aca91e2

    Download Submit

  • /data/user/0/com.ckygogqt.hlighrp/code_cache/secondary-dexes/tmp-base.apk.classes8408172628557375899.zip
    Filesize

    378KB

    MD5

    bd20e8ac218946804876995a004e78c7

    SHA1

    9098eccf8de7a834394378bdadda9279f0f0d596

    SHA256

    d9b37fcd290f9143aafdfecaf99a63ede7d0eace152ac39f032f4e9f88e4807d

    SHA512

    3d25da9c787d9a2eda53fbef8f471ebf42e961342d553ae421fbfa1fd2fb0d0a6951eb6624a17a1bcd2438d345dba3cbb55338f96f31897989312cc89e4f5e28

    Download Submit