Extracted

• • Target

    28aa131b1ef777995da0e7a63b369f194c2120a942e8cfe370222ed325990728.bin

  • Size

    1.1MB

  • MD5

    d18205664c3e3db7c733ef2844ef9c09

  • SHA1

    91174240c632d273d163be217dc12b5209fe5dad

  • SHA256

    28aa131b1ef777995da0e7a63b369f194c2120a942e8cfe370222ed325990728

  • SHA512

    367814713afc264ebc21477f2bd01385bd156ff7024c2e41bed21ac23a4ad91a1e6b97391244b484f50124ca3b3a4707eae1d755e4dd2544cf925dfbe038e937

  • SSDEEP

    24576:sMDZIPhrFuVi2VYAgU94DgvyS8ZAsmJWwjojDQUwg/CqHF:fDZIlIjVY9E4Dsy1k0wjufwg/5F

  Score

  10^/10

  hookbankerinfostealerrattrojan

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    banker

  • Acquires the wake lock

  • Reads information about phone network operator.

  behavioral1behavioral2behavioral3