Analysis

  • max time kernel
    5s
  • max time network
    95s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    07/11/2024, 12:39

General

  • Target
    e690b102119feb6355d26b98b49a8d95362126dd7b86211a0191c2ae4505e560.bin [MConverter.eu].apk
  • Size 1.5MB
  • Sample241107-pv36essenn
  • SHA256 e690b102119feb6355d26b98b49a8d95362126dd7b86211a0191c2ae4505e560
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • hydra

AES_key

Signatures

  • Hydra

    Android banker and info stealer.

  • Hydra family
  • Hydra payload 2 IoCs
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.grand.hydrar
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5047

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libdexload_x86.so

        • Path /data/data/com.grand.hydrar/files/libdexload_x86.so
        • Size 297KB
        • SHA256 6e6f1da5ca4a2c105c685d8d9fdc4ef6024b933a620eb3585fcfdbc3fcfc100d
        • MD5 SHA1 SHA512 SSDEEP

        a.a

        • Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/a.a
        • Size 2.2MB
        • SHA256 63b346eff1e062168d8e9674cd33d8c4286456f786163792b7e114e4112ae4ab
        • MD5 SHA1 SHA512 SSDEEP

        classes.dex

        • Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/classes.dex
        • Size 67KB
        • SHA256 5fe4af0039643c70ec19db55972fa36bb6a751dc4ba8e88da555327f4497f65e
        • MD5 SHA1 SHA512 SSDEEP

        classes2.dex

        • Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/classes2.dex
        • Size 1005KB
        • SHA256 ad06ffe5ad52bf51a762b850734229f1ab5b195c4e237b0a43d660a3a1c58928
        • MD5 SHA1 SHA512 SSDEEP

        monay

        • Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/monay
        • Size 963KB
        • SHA256 f2b1e6fe55f2ecffc5ad9245866849d534fdb2bcd093384ec5d1aac975a05d0c
        • MD5 SHA1 SHA512 SSDEEP