Analysis
- max time kernel
5s - max time network
95s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
07/11/2024, 12:39
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
e690b102119feb6355d26b98b49a8d95362126dd7b86211a0191c2ae4505e560.bin [MConverter.eu].apk
Resource
android-x86-arm-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
e690b102119feb6355d26b98b49a8d95362126dd7b86211a0191c2ae4505e560.bin [MConverter.eu].apk
Resource
android-x64-20240624-en
5 signatures
150 seconds
General
- Target e690b102119feb6355d26b98b49a8d95362126dd7b86211a0191c2ae4505e560.bin [MConverter.eu].apk
- Size 1.5MB
- Sample241107-pv36essenn
- SHA256 e690b102119feb6355d26b98b49a8d95362126dd7b86211a0191c2ae4505e560
- MD5 a34a7f1135965b0a68f15227bb7b2389
- SHA1 65016c2e45c50acc91b3bf061e760d352d3a57bd
- SHA512 74325973b9d3dbc682b986d0e1db3eef2345c8a4ab910647b77e2ecac9b94cee9b5e5ace5a81f03c20fddee52fcf4dd0214f2db58a8d5b145fdacb2b58cf57c3
- SSDEEP 24576:Q9V0Nv1z3EM8qGHBqJKcHwxaNnnO65YT9PoGzKgTNl7bt1twkheNC+LEjeVK:GV0WFheHuaNnOT93egTNl7btn5gEjmK
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
hydra
AES_key
Signatures
- Hydra
Android banker and info stealer.
- Hydra family
- Hydra payload 2 IoCs
resource yara_rule behavioral2/files/fstream-4.dat family_hydra1 behavioral2/files/fstream-4.dat family_hydra2 - Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /storage/emulated/0/Android/obb/com.grand.hydrar/dp/classes.dex 5047 com.grand.hydrar /storage/emulated/0/Android/obb/com.grand.hydrar/dp/classes.dex 5047 com.grand.hydrar /storage/emulated/0/Android/obb/com.grand.hydrar/dp/a.a 5047 com.grand.hydrar /storage/emulated/0/Android/obb/com.grand.hydrar/dp/a.a 5047 com.grand.hydrar - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.grand.hydrar
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.grand.hydrar/files/libdexload_x86.so
- Size 297KB
- SHA256 6e6f1da5ca4a2c105c685d8d9fdc4ef6024b933a620eb3585fcfdbc3fcfc100d
- MD5 5cd1cfcd474a2ca77008e5d6330e3cfb
- SHA1 eedcc4d5f8cda0827ecf5e3345661daf215a8610
- SHA512 ea30a29839e7e93457c1816e1fdfdfaa924f50da0fe3cc2022bb6f7c04b62eea6bd86a0b92b1a915cdfdb32e30c5b94ad8d3d7cfd8b5b3f8d6452b0cf1f7d90a
- SSDEEP 6144:pFRnl6Tqs9Wn9OLgT4toCDEhL0Ci/7NOK0D7ueGIyc7UJVXwES4aeldK7boCrGv8:xyd+
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/a.a
- Size 2.2MB
- SHA256 63b346eff1e062168d8e9674cd33d8c4286456f786163792b7e114e4112ae4ab
- MD5 02ef6c7be109d21fe361f4afebd5824c
- SHA1 9511d3dc829cdecc2c6302245fdcd3ba55690fc6
- SHA512 459fa7a02e0543b6c4a9ea2170242594f7ddc9dd05fa601e94fb3995bf0152d77000a57b2b917f03833afa2119ecdb1d13b9588ff3a99ed55ee282742c82b9be
- SSDEEP 49152:88eDWSamftvDDHvt8Nvnm/8OLqCPWCO7SRm:8TDWSam1rDSNvnm0sm
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/classes.dex
- Size 67KB
- SHA256 5fe4af0039643c70ec19db55972fa36bb6a751dc4ba8e88da555327f4497f65e
- MD5 26a319052fc4cafa8a2a8fc69942a153
- SHA1 3159c01f2bef33e481a89800038fefb0e00bddc4
- SHA512 01590da111011918d99f56679b6e52b656fe6519a3e799fc2a988191943a3b3ee4f1575b30bc2d54ec5b7f8b825bb42d230041690d34b0e62d0cc8c56901ae44
- SSDEEP 1536:omdfmNTEQqDMMZ8xni6PAkyo83exd+3Imw6zFQBNV:o/tiBkyoierUdw6qBX
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/classes2.dex
- Size 1005KB
- SHA256 ad06ffe5ad52bf51a762b850734229f1ab5b195c4e237b0a43d660a3a1c58928
- MD5 cf439a4b22797965fd40f5e53990e3a1
- SHA1 dbcf62946e69851c1429789a9e0ca72bf63a9047
- SHA512 1704f2292fd9323dbd9a60d558a3fed900a5b0a9d5563911de42e2e1a408eb41ae8aa8c4da2eab9770db4f007b91a8e54df55f5e93c3ddbbdfa8fe2ce8198f5b
- SSDEEP 24576:pCqTMWHIFIN1Tu2tMtjxUwzIgtDltbvFVwkhENC+w:sS5mIN1KJjXEgtDltbvjpP
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/obb/com.grand.hydrar/dp/monay
- Size 963KB
- SHA256 f2b1e6fe55f2ecffc5ad9245866849d534fdb2bcd093384ec5d1aac975a05d0c
- MD5 26d1342cdcf83f550cb1156148c1b2de
- SHA1 989ecc4a7ed46aa33dbc8b8385d72de4a852965c
- SHA512 87b0df59ac9467a920fe76a01062e82b62f9a6646f1e1566ff00edd98298ff924cd7ccfad9e5064d9b82ed812e889afbb62743b6f325a8ce5bd0877a6a1d5104
- SSDEEP 12288:SglY2r0KEgojlrWUlpxvmcCTFhFtueF+ML1W3TDiCxRc0raTED6EBzvNXBk3Xhr8:SCZrFEDFWMpx+cub2mERx/DBvSRr46fG
- MD5 SHA1 SHA512 SSDEEP