hook | 3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b

Analysis

max time kernel
149s
max time network
153s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
06-02-2024 22:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b.apk
Size

1.1MB
MD5

6c27f2410f1185d4b9aac8d70e3cc2f1
SHA1

5b4b87177d0b67fd6840f975ca3958b1d3339db1
SHA256

3fb779f4458ffedbf966e8b35040351968b657bf79c74e957ee550b9cb196d9b
SHA512

c9b811bbcf0ab88b61f6503623a95c091827b2e46e2f7ade508f7aa5042676b5439f8fd92952857f076e1e6772039827315ef7e5a0210102608366c27fdb747b
SSDEEP

24576:TnS7OIqxgl2af2bJZFkbeIGsAEL6kgdZJo2y9Uzg/LbQq7T:bSLf2lZaeAL6pi9Uzg/T7T

Score

10^/10

hook infostealer rat trojan

Malware Config

Signatures

Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
rat trojan infostealer hook

Makes use of the framework's Accessibility service 3 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.xahinelasonukagu.hudegeki
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.xahinelasonukagu.hudegeki
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.xahinelasonukagu.hudegeki

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.xahinelasonukagu.hudegeki

Reads information about phone network operator.

com.xahinelasonukagu.hudegeki
1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
PID:4985

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xahinelasonukagu.hudegeki/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.xahinelasonukagu.hudegeki/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
e232b5d8221b8f86387717c0d4b209c3

SHA1
774f9c57d986b0d05ac6453731d54bd5b7ef7da5

SHA256
318173a27a7ca0fa0ae1cd000e3755446d45619141536878e2226410226ce474

SHA512
057914e88af59c598ab41eb3788ffcb9db7ae3c63f27df0bbaa79b77519de3807c06e9d7069e4d4b550327245804f1ee77d9ac13f1244d339e2a0a3c872b3552

Download Submit
/data/data/com.xahinelasonukagu.hudegeki/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.xahinelasonukagu.hudegeki/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
6bcd1fc76122b316416fc0c0f826cf3a

SHA1
70a31829e9ba8fd2203e1a86a7e65fe4903b3bb3

SHA256
739726863ad6b2947fbe576b6bfaffc175b042965c25de1c892a0c5658d71eea

SHA512
a5b4c291af02033db766af8957fc92768290b45cde3bbf6c6c363f42c386b65ad7464fb77aea4b158d76b822f766f76336a4c57f40dca1d8b392bb649e0f45d6

Download Submit
/data/data/com.xahinelasonukagu.hudegeki/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
af8f849ad08562a7892b4d1c3095ebb9

SHA1
76449a28ce6cee4f9c6ab4ac0969820f78ae1cbb

SHA256
ac1e859ca7979dca488431e3bf77745bfe4f39c37d4c7bdfc8e2fa6fd0669032

SHA512
50245e5050423b05d0035b3f17c6778ca69686b36b436b05f3381595343c53de0e383f74869e83c738bea769ca499f898ccec0db2dc95d4f315d93d783f18f89

Download Submit
/data/data/com.xahinelasonukagu.hudegeki/no_backup/androidx.work.workdb-wal

Filesize
156KB

MD5
0e59c254eb6f1df57d08a3288c9f8a33

SHA1
1149261926352205d5615dae6d1c31e09db19b5d

SHA256
4a7b7c6823983b744a29275d6f661ad0db74b0b110d2b642c627af8ba89168c3

SHA512
b677cc19a0cafa881187b49962cf77a0fad343ab5a46ddff6814c865ebd8315ab33e31e16ddf604fb73a38c98600093391914641158eadd1e2a40f59bb903bd2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads