Analysis
-
max time kernel
179s -
max time network
187s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
05-08-2024 06:37
General
-
Target
34d77868cbf62fda6b88a5c7b037d3f3.apk
-
Size
4.4MB
-
MD5
34d77868cbf62fda6b88a5c7b037d3f3
-
SHA1
00cdfeaa48544e5c6f0ba3d9329bb015e51e5972
-
SHA256
4e20b8bf1a926e7d5b84e75c920457d9dc572ec78b9a23d1b08afcefe9b78e5c
-
SHA512
c4e6e76c670d94062cedac1abfa814e2062087cc12626581c66754b642c17f5d296a5e37b546a9549f30a9a96e59daea8e2b7f86786f999b75124791f4bbcd8b
-
SSDEEP
98304:LCVeYx5HKqvpDRG1DMlRiQQxX/sqS1zHOrBNI:LqXHNvwp5sjzau
Malware Config
Signatures
-
Hydra
Android banker and info stealer.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
phwbin.meww.xojktruujg1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Performs UI accessibility actions on behalf of the user
- Queries information about active data network
- Queries the mobile country code (MCC)
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
MD5a1fe9c54a7f9befa304187869fac76da
SHA153908c10ecc50d1235bf7f1b292323dfc1bd858d
SHA25696c14703d56809246c5137cc9d361bb6fe7e6844bd97efe0378473c5e1fa6e3a
SHA51244b870e299d303d86b3fd2196e8c77124a40d3ed0e3aec9e3909874951f98485fdabc2e9866cf4d424350dccaa6809fa6021c3c97a435182d7d55918de159b6b
-
Filesize
2.6MB
MD5db0f230a0e1a546f83769c613d986299
SHA150317405a49a3b257ad1b2cc5f854cafefedb80f
SHA2568b42329687f8371c8a018fc98f0c3701670c891a7edf044b3478a0c9316818e4
SHA51256e8f504c3e2da8a136a3db7316368325814e5fdcf09ab47442432583f5df47691bb36cb4a912f6a1bb78e0e2f61f21e805a297e6c9d591f6bb97881b0852713
-
Filesize
1KB
MD5f17b5d92fd9821d3451fba812fe4b065
SHA1afa4842af8a799f8efd881e103f41bba740b0d9b
SHA256a844996dade5e87ff738d13803c9a0b9687aef9132860d2b069d39180df3b473
SHA512d4de29c12dc2336e6ccbda862ebb8b276f21cdd65e22e0ffaeb05e8c1f09c22fd1398c02da0c82fd9c415da2dae016c46831cee582563eb97347029d5cc0d6f0