General
-
Target
dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d.apk
-
Size
1.2MB
-
Sample
231230-mcxvksgcak
-
MD5
7c466ce81527867aa98ff5f187e54bc4
-
SHA1
e394e2a93af3e746bbd87f2db3ecabf68ee45ba6
-
SHA256
96d9021b3f63da9378e9208b640ebb670906718012db902a400ba101dbdbd3b6
-
SHA512
dc084d7338b41c95b72fbd44c70f2c4dfd3864297eab96d173f58cf3b71d9bff9c068a971686cae8257d560143dd50afac3e1afcd807a5025eacc2631936cbeb
-
SSDEEP
12288:CUZFO7Nq1wryobO83ubYZtsZcoc1IkcxxhtS/7iwbO+yq39DCn0yKLRrp8cWxgii:C6YqL83ublicCy+yq3kn0yIRrp83Gh
Static task
static1
Behavioral task
behavioral1
Sample
dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d.apk
Resource
android-x64-20231215-en
Malware Config
Extracted
hook
http://173.254.235.53:3434
Targets
-
-
Target
dc4712f817e553e8371df12013c9ebe027056bdbd2aeb56442b5b46ac71f321d.apk
-
Size
1.2MB
-
MD5
7c466ce81527867aa98ff5f187e54bc4
-
SHA1
e394e2a93af3e746bbd87f2db3ecabf68ee45ba6
-
SHA256
96d9021b3f63da9378e9208b640ebb670906718012db902a400ba101dbdbd3b6
-
SHA512
dc084d7338b41c95b72fbd44c70f2c4dfd3864297eab96d173f58cf3b71d9bff9c068a971686cae8257d560143dd50afac3e1afcd807a5025eacc2631936cbeb
-
SSDEEP
12288:CUZFO7Nq1wryobO83ubYZtsZcoc1IkcxxhtS/7iwbO+yq39DCn0yKLRrp8cWxgii:C6YqL83ublicCy+yq3kn0yIRrp83Gh
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-