Overview

overview

10

Static

static

6

9277a80e4e...ec.apk

android-9-x86

10

9277a80e4e...ec.apk

android-10-x64

10

9277a80e4e...ec.apk

android-11-x64

10

vk_dex.apk

android-9-x86

vk_dex.apk

android-10-x64

vk_dex.apk

android-11-x64

Analysis

  • max time kernel
    154s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    05-02-2024 16:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9277a80e4e55c8d79db6f99406c792ec.apk

  • Size

    3.2MB

  • MD5

    9277a80e4e55c8d79db6f99406c792ec

  • SHA1

    728b32ec63f091909af9cc7c666f651767fa31ad

  • SHA256

    c4844236e849260e5bd9d1a1d548c11667bc9f7c8c645c0a36180287a4fd48a7

  • SHA512

    3b35896052c6b99c64915617c11c87fbda2c73220dfd6f54beae2432189873182a3b5a32df57e42946cd82da9124541ca515b2fd5eabc3f43e428dfbe22cf307

  • SSDEEP

    98304:v9lDx+hV/NkiLjTzUV1yLrXHWeVr7inm43W3w:v9xxFiLjTwc/B+nj3d

Score
10/10
hydrabankerinfostealertrojan

Malware Config

Signatures

  • Hydra

    Android banker and info stealer.

    bankertrojaninfostealerhydra
  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator.

Processes

  • com.tdqjgkem.crspygc
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    PID:4958

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tdqjgkem.crspygc/code_cache/secondary-dexes/tmp-base.apk.classes4626011605105453282.zip
    Filesize

    378KB

    MD5

    b9660c0a8fe8598ec0beca55830b627a

    SHA1

    c1ee81c75b6a6a06052fe78bd0c02d9d7a4dd244

    SHA256

    36d7f5217ec382425f4049df1d738f62c960942840fbbd88ce671a8f63e0d15c

    SHA512

    16bcf33a1265f6dc0033f9592173964b50b61f98cb898ab9fc781cc42694df34c47c15128053ec8684a3dd3a170af399ddb9147ecbdcdfdcfdc2e7b1829f1890

    Download Submit

  • /data/user/0/com.tdqjgkem.crspygc/code_cache/secondary-dexes/base.apk.classes1.zip
    Filesize

    902KB

    MD5

    e762c5069fa471eace44ace7cc5c0262

    SHA1

    52c194a4cd957ce42514dc8cc9877d215402f9ff

    SHA256

    85d76a884f6187d35f7dbbd202cbd98b82dc2de0cd243fbea3d423c85912ab22

    SHA512

    792ca62836fa6d7d26b3da26ba6dea65e5aa8f9f7dfec75d676ab6b8a8ed9766048059612417dbe9f9b9d3ce45d397a0aac079d44c1f842328183743c444cb71

    Download Submit