Overview

overview

10

Static

static

6

8421a95ea4...18.apk

android-9-x86

10

8421a95ea4...18.apk

android-10-x64

10

8421a95ea4...18.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8421a95ea4edfe3a06cb6c78db58848b_JaffaCakes118

  • Size

    3.0MB

  • Sample

    241101-f8sgeawjbv

  • MD5

    8421a95ea4edfe3a06cb6c78db58848b

  • SHA1

    7b31ba4b4b2b5971ddbc812689c8ac28f28bd2a8

  • SHA256

    77b51738442f4d1b388db76db05388bd358b19f21c1f663e7993f9e32a7d6278

  • SHA512

    aaccf4c3343a3c0218b62e8545baeb8f2c3ebc1401001844303bb4f3d75b45538c7a99dc01482ee79990bbfe5bedd9edc27c614931d30f5a244488acbc409bb1

  • SSDEEP

    49152:v+afhiOsnVv0VdZNg6ieo3jGkIuFMEh4X64AKdA90Y3xnb5n5UgQCVSHn:vdf9aVv0Vd7rmXIWRj90WFusV0n

Score
10/10
hydraandroidbankercollectioncredential_accessdiscoveryevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      8421a95ea4edfe3a06cb6c78db58848b_JaffaCakes118

    • Size

      3.0MB

    • MD5

      8421a95ea4edfe3a06cb6c78db58848b

    • SHA1

      7b31ba4b4b2b5971ddbc812689c8ac28f28bd2a8

    • SHA256

      77b51738442f4d1b388db76db05388bd358b19f21c1f663e7993f9e32a7d6278

    • SHA512

      aaccf4c3343a3c0218b62e8545baeb8f2c3ebc1401001844303bb4f3d75b45538c7a99dc01482ee79990bbfe5bedd9edc27c614931d30f5a244488acbc409bb1

    • SSDEEP

      49152:v+afhiOsnVv0VdZNg6ieo3jGkIuFMEh4X64AKdA90Y3xnb5n5UgQCVSHn:vdf9aVv0Vd7rmXIWRj90WFusV0n

    Score
    10/10
    hydrabankercollectioncredential_accessdiscoveryevasioninfostealerpersistencetrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Hydra family

      hydra

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasioncredential_access

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Queries information about active data network

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v15

Tasks