General
-
Target
242610e74b8914d64fdbcfcc8b63cfb6
-
Size
2.8MB
-
Sample
240501-ym1vrshd68
-
MD5
242610e74b8914d64fdbcfcc8b63cfb6
-
SHA1
1731224b7e2705c4910ed477474dc009916d170e
-
SHA256
9f17fc20c5c725707168b93690063638cb6e5b3a7b77b3e826e8458a79eb36e2
-
SHA512
cfe0db94bea86cea0bca9c04d56274320991d5595149f7c000d36c368ce95854327f75c7e5e7a5733686c380a677cd2c91fc758c0c3d37161745a22161576cdd
-
SSDEEP
49152:rG/OCzgkixmu1Jtp3bRNQfo35dGViLscVvRd7Te32k7B5FXzgg/lU:rG/OCUki0ItpEncVvRNK32k7/FXXU
Behavioral task
behavioral1
Sample
242610e74b8914d64fdbcfcc8b63cfb6.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
242610e74b8914d64fdbcfcc8b63cfb6.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
242610e74b8914d64fdbcfcc8b63cfb6.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
hook
Targets
-
-
Target
242610e74b8914d64fdbcfcc8b63cfb6
-
Size
2.8MB
-
MD5
242610e74b8914d64fdbcfcc8b63cfb6
-
SHA1
1731224b7e2705c4910ed477474dc009916d170e
-
SHA256
9f17fc20c5c725707168b93690063638cb6e5b3a7b77b3e826e8458a79eb36e2
-
SHA512
cfe0db94bea86cea0bca9c04d56274320991d5595149f7c000d36c368ce95854327f75c7e5e7a5733686c380a677cd2c91fc758c0c3d37161745a22161576cdd
-
SSDEEP
49152:rG/OCzgkixmu1Jtp3bRNQfo35dGViLscVvRd7Te32k7B5FXzgg/lU:rG/OCUki0ItpEncVvRNK32k7/FXXU
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Requests enabling of the accessibility settings.
-
Acquires the wake lock
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-