Analysis
-
max time kernel
179s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
01-08-2024 22:04
General
-
Target
4d070efa5ba86967726d4118eed59e73bff79f0b5eb37e4b7f8d5a5a425cb0bf.apk
-
Size
2.9MB
-
MD5
fe356ab62b074339cc1e5636f44b0419
-
SHA1
6d8bd6810de1fbd7261328bdc85a4e1bd9c53f1d
-
SHA256
4d070efa5ba86967726d4118eed59e73bff79f0b5eb37e4b7f8d5a5a425cb0bf
-
SHA512
197bc4969f8cba22fe5a79268d191d59b108db1767218aff299fa5366285422cd3fef61b177347b92f0d291423e5b029835bb67eed0e48088ddff34cce6f6ecd
-
SSDEEP
49152:3Edb/J2TvxJVWKNqt4R+j25AH+T3ch7g9d+VRl1qHiBUdDYXwUoT+C3T8:3siv1WsqiAiUgrKiHim2XdoT/A
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Requests enabling of the accessibility settings. 1 IoCs
Processes
-
barely.design.rough1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Requests enabling of the accessibility settings.
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD5352bd89f0272600345d8590182feb5fd
SHA1891753992ce506c2750e87cd6cd8839e772ba390
SHA256db27332659918d9a90a189ae9ad1ca5417e27b03a4d044d604799fc8603b82fd
SHA512d1801c971cc5113ac325ffc58b2884e11d67bca90cf626a4856f3ec33022a591abadc5bf889f2479edbfbc655387877f023e3452fd8f590a2a601cbfbd36b5b7
-
Filesize
2.5MB
MD556513b4fdd59f5fe5657cbd8e7b955dd
SHA1e37ffbe24a090c90c593fb5971046fd210ce9d50
SHA256b97b4eb4e38db9021209718d72590ae4c9aeae6505a2486356f7cc537ac04c76
SHA512b67b81e2aca99ad70b001c28cd0bad9105404e0302a818f9b181343f3af698115a9498bcd89c5bf0ce7e9abffdb1f06999cbed409ec817adc29a2688423e4b7c
-
Filesize
1KB
MD515c70178ba45a56d28334d01389c30ae
SHA1b222cf17d1461047f9d7f25d7be9124a4128a35d
SHA25643f50ff5abfad4726bfdfab60ef366f42748f33d3ba93f27722b287b7827b003
SHA512b342333425d03005dd63059202c1e91f1b453cf4c4d6fc0eaa7dd060c70efda78f896694113670219268e2cab67d147527d27f6505392afab2f945f564595e09