Analysis
-
max time kernel
150s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
24-01-2024 22:03
General
-
Target
49b1a094b7abe2f2d0202cfc3023535d43b8450cf08e19647bb7127f22e5d739.apk
-
Size
1.1MB
-
MD5
5f90d143a5de2341d18fc09d6977e27d
-
SHA1
0b3c79eaceb6fcedc61d7281bc08666c333c69b5
-
SHA256
49b1a094b7abe2f2d0202cfc3023535d43b8450cf08e19647bb7127f22e5d739
-
SHA512
bcb30c4ab6947bf31fe183e8d3cf234b076b4bbc28b34d9d68dc31971796fed9957bde69460c10ea4881a08c683cb9d26267ba9fa2689499af301c9157d314ba
-
SSDEEP
24576:zS4ik8yDvJ+iEGfXex8Ds1zoQQoip/ojyMxg/XvZKy5:zDR8yDQiE4eXj+/XMxg/Yy5
Malware Config
Extracted
hook
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.puvovojegodeyu.pugi1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD55e748036730b875f4704fe6702e557ec
SHA12fdcf70d84f25819e4f8ab37099f27e6314efcb0
SHA256965e116abfceab820b0cae9a2fea995ca6d4ff1c51b39630f93fa9379fa9f6bf
SHA512e367a76ee0f11872d16d5353a2b5f1d19d83def2dfa0300dba2d78b3f8f34ace5b73d0160fc4597ddfa87ac9761447d35dceaf3db1be309e6e44785d28f6ae26
-
Filesize
16KB
MD5c49a5033a83ce947686ecb7214fd97df
SHA1072935d16ccc9f69c03f4a32dee4c992651e333b
SHA2564ca959723ab35e9c785e39d6282299f3b8cd83ac87031e5820cf022e42ce65b0
SHA5128ad2e7161eaca1dc0c806e2a245ca8b8252e0df9265e300e63938b06ecf1bfdbe642cccb3cd8a22c3ede7c9396baeddaed2e96331d748458d3a5bfc738b27558