Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6

3fef71a5cc...45.apk

android-9-x86

10

3fef71a5cc...45.apk

android-10-x64

10

3fef71a5cc...45.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fef71a5cc033e792ee12c5a69f361c321b416afb78e418b677ccfb4429c2a45.bin

  • Size

    3.7MB

  • Sample

    250323-16l7tsxyht

  • MD5

    9e09fb723479f15c4deb642a75876437

  • SHA1

    c25dd26399fad924a8e68fcc34f51a4677efe8d6

  • SHA256

    3fef71a5cc033e792ee12c5a69f361c321b416afb78e418b677ccfb4429c2a45

  • SHA512

    f341047ba9bf6cdd0880a4906231bb3d02275af6d2f33466a6464d9d137d2eb6b8d6bb94a033516357d431521e0bda9584760c28b6ab37220ddc9ec651c95dd9

  • SSDEEP

    98304:paccxxjqDA6Ai+Qy7jjrWwSOq+ZnWM0S0RJKFocDS3u:pMxmDA8xQjvvDq+ZYjRJbcGu

Score
10/10
hydraandroidbankercollectioncredential_accessdefense_evasiondiscoveryevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      3fef71a5cc033e792ee12c5a69f361c321b416afb78e418b677ccfb4429c2a45.bin

    • Size

      3.7MB

    • MD5

      9e09fb723479f15c4deb642a75876437

    • SHA1

      c25dd26399fad924a8e68fcc34f51a4677efe8d6

    • SHA256

      3fef71a5cc033e792ee12c5a69f361c321b416afb78e418b677ccfb4429c2a45

    • SHA512

      f341047ba9bf6cdd0880a4906231bb3d02275af6d2f33466a6464d9d137d2eb6b8d6bb94a033516357d431521e0bda9584760c28b6ab37220ddc9ec651c95dd9

    • SSDEEP

      98304:paccxxjqDA6Ai+Qy7jjrWwSOq+ZnWM0S0RJKFocDS3u:pMxmDA8xQjvvDq+ZYjRJbcGu

    Score
    10/10
    hydrabankercollectioncredential_accessdefense_evasiondiscoveryevasioninfostealerpersistencetrojan

    • Hydra

      Android banker and info stealer.

      bankertrojaninfostealerhydra

    • Hydra family

      hydra

    • Hydra payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectiondefense_evasioncredential_access

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Queries information about active data network

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks