General

  • Target

    98ec0c587100d35500cf64dbea79054417477522438e55ab2949ce079d6278c9.bin

  • Size

    1.1MB

  • Sample

    240120-1xxbfahgf2

  • MD5

    d2ceaa255c3c2684d843e3d8e25de89d

  • SHA1

    f65a3cf7fe2c80d9727f72b7a32efe6dc9352066

  • SHA256

    98ec0c587100d35500cf64dbea79054417477522438e55ab2949ce079d6278c9

  • SHA512

    47aba42179b3a9eb161414783fd36ab96a649f2e19b44a0bdd1e34510233a4725f95c854715e5b0b2e3b19be17156f5952000d2d3f33be62a4671d913ba831ff

  • SSDEEP

    24576:5/9BNPqJQT/JSuC+0SvxQnTgyZmeSuoj4Tkg/88H7:7qJQT/JSulZSkWlTkg/t7

Malware Config

Extracted

Family

hook

C2

http://172.16.39.137:3434

AES_key

Targets

    • Target

      98ec0c587100d35500cf64dbea79054417477522438e55ab2949ce079d6278c9.bin

    • Size

      1.1MB

    • MD5

      d2ceaa255c3c2684d843e3d8e25de89d

    • SHA1

      f65a3cf7fe2c80d9727f72b7a32efe6dc9352066

    • SHA256

      98ec0c587100d35500cf64dbea79054417477522438e55ab2949ce079d6278c9

    • SHA512

      47aba42179b3a9eb161414783fd36ab96a649f2e19b44a0bdd1e34510233a4725f95c854715e5b0b2e3b19be17156f5952000d2d3f33be62a4671d913ba831ff

    • SSDEEP

      24576:5/9BNPqJQT/JSuC+0SvxQnTgyZmeSuoj4Tkg/88H7:7qJQT/JSulZSkWlTkg/t7

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks