Extracted

• • Target

    dd397384d66ed4fc68204dea467006a73d2e58c5b0c514a0d80d0fcc589bf282.bin

  • Size

    1.2MB

  • MD5

    46e17803ceda35d70a8a6188db14d9f4

  • SHA1

    1ee1bd3028ef181abb541fe43b854964d3c81a10

  • SHA256

    dd397384d66ed4fc68204dea467006a73d2e58c5b0c514a0d80d0fcc589bf282

  • SHA512

    5152b146e36b549e50a6f832af1bc91cbabee38ae282648dfbbd62f6913a3931014b8f6bd0513989c21bcb041e5f38034d8c04fbc05a73d7adb7d888e27132c1

  • SSDEEP

    24576:bcCIPUBS1Hagj9KEgNzOrKschyZopu8+ESELgSZe:ICIMY1HaggEgNzVz9gVELgSM

  Score

  10^/10

  hookbankerinfostealerrattrojan

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    banker

  • Acquires the wake lock

  • Reads information about phone network operator.

  behavioral1behavioral2behavioral3