hydra

General

Target

fd642953848d954af2a2733139e884f3_JaffaCakes118
Size

3.2MB
Sample

240420-xemgqsfb33
MD5

fd642953848d954af2a2733139e884f3
SHA1

222240420ee054cace1202fd13ea97029eb922b1
SHA256

03c8cba14139423ec179759052b178852ef7a3884a969876c2123bec7f7f8c65
SHA512

df627de0e622f04cdb79ec7b260edfb7369daf95fc23eef3550d76542cac111afd111e517c323f8e183481551d24d3307e1cde389e14190158185dbee741f0c2
SSDEEP

98304:GPOqbet6/pUC+PozHjXu1DbrXU6HopT3W3M:GPOBtxMBooJ3H

Score

10^/10

Malware Config

Targets

- Target
  
  fd642953848d954af2a2733139e884f3_JaffaCakes118
- Size
  
  3.2MB
- MD5
  
  fd642953848d954af2a2733139e884f3
- SHA1
  
  222240420ee054cace1202fd13ea97029eb922b1
- SHA256
  
  03c8cba14139423ec179759052b178852ef7a3884a969876c2123bec7f7f8c65
- SHA512
  
  df627de0e622f04cdb79ec7b260edfb7369daf95fc23eef3550d76542cac111afd111e517c323f8e183481551d24d3307e1cde389e14190158185dbee741f0c2
- SSDEEP
  
  98304:GPOqbet6/pUC+PozHjXu1DbrXU6HopT3W3M:GPOBtxMBooJ3H
Score

10^/10

hydra banker collection credential_access discovery evasion infostealer persistence trojan
- Hydra
  Android banker and info stealer.
  banker trojan infostealer hydra
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3
- Target
  
  vk_dex.apk
- Size
  
  106KB
- MD5
  
  bc185a98eeb3c6854c2caa633295fa3b
- SHA1
  
  cf0b10d87d8d6459ae5b74483d7020dd496800e1
- SHA256
  
  da37cf4de83a645e1b3241879abe4a9e1a2fdb8a5e3f8bbe634509ac660a480d
- SHA512
  
  5bb4bb3aaabf3fa44260c4aec4925fd60901eaf9be83ae661bbb013ca976dc9c4c5d2debea76fc8779ecbd01cf63221b8b6be9951139a972a3b82c92c0fc1c85
- SSDEEP
  
  3072:nQnd9yPnoYlod2kB2zYrp42EUzHGSPIyPzKEmOZPGk9Nt:ywnblhW28ru2kSPIyPz7Gk9L
Score

1^/10
behavioral4 behavioral5 behavioral6