Overview

overview

10

Static

static

10

3fb779f445...9b.apk

android-9-x86

10

3fb779f445...9b.apk

android-10-x64

10

3fb779f445...9b.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b.bin

  • Size

    1.1MB

  • Sample

    240206-1x4qhshcf5

  • MD5

    6c27f2410f1185d4b9aac8d70e3cc2f1

  • SHA1

    5b4b87177d0b67fd6840f975ca3958b1d3339db1

  • SHA256

    3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b

  • SHA512

    c9b811bbcf0ab88b61f6503623a95c091827b2e46e2f7ade508f7aa5042676b5439f8fd92952857f076e1e6772039827315ef7e5a0210102608366c27fdb747b

  • SSDEEP

    24576:TnS7OIqxgl2af2bJZFkbeIGsAEL6kgdZJo2y9Uzg/LbQq7T:bSLf2lZaeAL6pi9Uzg/T7T

Score
10/10
ermachookandroidinfostealerrattrojan

Malware Config

Targets

    • Target

      3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b.bin

    • Size

      1.1MB

    • MD5

      6c27f2410f1185d4b9aac8d70e3cc2f1

    • SHA1

      5b4b87177d0b67fd6840f975ca3958b1d3339db1

    • SHA256

      3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b

    • SHA512

      c9b811bbcf0ab88b61f6503623a95c091827b2e46e2f7ade508f7aa5042676b5439f8fd92952857f076e1e6772039827315ef7e5a0210102608366c27fdb747b

    • SSDEEP

      24576:TnS7OIqxgl2af2bJZFkbeIGsAEL6kgdZJo2y9Uzg/LbQq7T:bSLf2lZaeAL6pi9Uzg/T7T

    Score
    10/10
    hookinfostealerrattrojan

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

      rattrojaninfostealerhook

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks