Analysis
-
max time kernel
177s -
max time network
186s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
04-08-2024 22:07
General
-
Target
4e20b8bf1a926e7d5b84e75c920457d9dc572ec78b9a23d1b08afcefe9b78e5c.apk
-
Size
4.4MB
-
MD5
34d77868cbf62fda6b88a5c7b037d3f3
-
SHA1
00cdfeaa48544e5c6f0ba3d9329bb015e51e5972
-
SHA256
4e20b8bf1a926e7d5b84e75c920457d9dc572ec78b9a23d1b08afcefe9b78e5c
-
SHA512
c4e6e76c670d94062cedac1abfa814e2062087cc12626581c66754b642c17f5d296a5e37b546a9549f30a9a96e59daea8e2b7f86786f999b75124791f4bbcd8b
-
SSDEEP
98304:LCVeYx5HKqvpDRG1DMlRiQQxX/sqS1zHOrBNI:LqXHNvwp5sjzau
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
phwbin.meww.xojktruujg1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
MD5a1fe9c54a7f9befa304187869fac76da
SHA153908c10ecc50d1235bf7f1b292323dfc1bd858d
SHA25696c14703d56809246c5137cc9d361bb6fe7e6844bd97efe0378473c5e1fa6e3a
SHA51244b870e299d303d86b3fd2196e8c77124a40d3ed0e3aec9e3909874951f98485fdabc2e9866cf4d424350dccaa6809fa6021c3c97a435182d7d55918de159b6b
-
Filesize
2.6MB
MD5db0f230a0e1a546f83769c613d986299
SHA150317405a49a3b257ad1b2cc5f854cafefedb80f
SHA2568b42329687f8371c8a018fc98f0c3701670c891a7edf044b3478a0c9316818e4
SHA51256e8f504c3e2da8a136a3db7316368325814e5fdcf09ab47442432583f5df47691bb36cb4a912f6a1bb78e0e2f61f21e805a297e6c9d591f6bb97881b0852713
-
Filesize
1KB
MD595623509a32f251c7d3715c7d9ac5001
SHA125cdf9610728f798ccd53d31e2c01ff699daf838
SHA256510342adfa91d6998216c0374e716d9039a2ca3c63b2dca208250d4fadaa6a6c
SHA5128329842a9c5a6c60f8bf7f8d6f78736103b6fc60f0d7026ef808580eca2bfff42061eecd0c318832fab2a877790d58e1925272d4538816316f5204b32ce888fb