General
-
Target
app-release-1.apk
-
Size
1.1MB
-
Sample
240627-axqwjssgnc
-
MD5
3408736ab7a0690fb2a8e7d633914bd1
-
SHA1
905eb749444f2e7337d1622d5649548dc9852753
-
SHA256
7682a4ba33589368f805dff5965978bcc627ae97e09976a331080777e8954f44
-
SHA512
5fa0a557877c2e603b96249a0072c1da3fe28cb56cfc9dee0ac18a0f65aa376ce8d801e75b533512aeb885bcadc1d9d47a32a07eafaa1aea1e0af9496b2a995d
-
SSDEEP
24576:1W2o1/kIziFZJUEQ/a18wyhyT/ojyq7g/e6By:KRkoiF8EOa18wym/Xq7g/Dy
Malware Config
Targets
-
-
Target
app-release-1.apk
-
Size
1.1MB
-
MD5
3408736ab7a0690fb2a8e7d633914bd1
-
SHA1
905eb749444f2e7337d1622d5649548dc9852753
-
SHA256
7682a4ba33589368f805dff5965978bcc627ae97e09976a331080777e8954f44
-
SHA512
5fa0a557877c2e603b96249a0072c1da3fe28cb56cfc9dee0ac18a0f65aa376ce8d801e75b533512aeb885bcadc1d9d47a32a07eafaa1aea1e0af9496b2a995d
-
SSDEEP
24576:1W2o1/kIziFZJUEQ/a18wyhyT/ojyq7g/e6By:KRkoiF8EOa18wym/Xq7g/Dy
Score10/10-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Removes its main activity from the application launcher
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Requests enabling of the accessibility settings.
-