Analysis

  • max time kernel
    5s
  • max time network
    68s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    07/11/2024, 14:01

General

  • Target
    319749ae38911de82016214433f84cea75ecab470ca784472378857947c528e8.bin [MConverter.eu].apk
  • Size 1.5MB
  • Sample241107-rbm17stdlh
  • SHA256 319749ae38911de82016214433f84cea75ecab470ca784472378857947c528e8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • hydra

AES_key

Signatures

  • Hydra

    Android banker and info stealer.

  • Hydra family
  • Hydra payload 2 IoCs
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.grand.snods
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4963

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libdexload_x86.so

        • Path /data/data/com.grand.snods/files/libdexload_x86.so
        • Size 297KB
        • SHA256 6e6f1da5ca4a2c105c685d8d9fdc4ef6024b933a620eb3585fcfdbc3fcfc100d
        • MD5 SHA1 SHA512 SSDEEP

        a.a

        • Path /storage/emulated/0/Android/obb/com.grand.snods/dp/a.a
        • Size 2.2MB
        • SHA256 84c42a5f5d72055b40f277097171b782b2cc76d355c99de8b4dd8be1405d1914
        • MD5 SHA1 SHA512 SSDEEP

        classes.dex

        • Path /storage/emulated/0/Android/obb/com.grand.snods/dp/classes.dex
        • Size 67KB
        • SHA256 919af9ad41bac5b089efbc37d6e72787826b947d149695ea8ec92ffa9c832ce2
        • MD5 SHA1 SHA512 SSDEEP

        classes2.dex

        • Path /storage/emulated/0/Android/obb/com.grand.snods/dp/classes2.dex
        • Size 1005KB
        • SHA256 dc73f0cfbe1a63bc32a1bf90c1d7ecddc9e9e49d1fc82010ad42d8eddfe07ae3
        • MD5 SHA1 SHA512 SSDEEP

        monay

        • Path /storage/emulated/0/Android/obb/com.grand.snods/dp/monay
        • Size 963KB
        • SHA256 28b6425ddf936d9c85c665101f8d83d8427e32763cbd8becde84c8aa92229c24
        • MD5 SHA1 SHA512 SSDEEP