Extracted

• • Target

    2bd1641352c96b21dfa61088b708c907dd6b57e5ba919b6bb3a7c6bf649dc66b

  • Size

    1.2MB

  • MD5

    ad5e53c3c1a9d830e4d5074a23b1ca7f

  • SHA1

    138458bc2cf96c813f2ff108d8ceb2a9cbc18e3b

  • SHA256

    2bd1641352c96b21dfa61088b708c907dd6b57e5ba919b6bb3a7c6bf649dc66b

  • SHA512

    cf1abb7b240258b0c54f84c56d491cfec68fd75152dad4821b162ec04f4fb2d590beb1f9833c4f5327e7bb8e0763b38116282d068a6fe917c7ce64b57cdfa8ba

  • SSDEEP

    24576:xj6ShpuJkeC0iOSqUPY25MA6K8aFU8RcGikBkwG4ugoCQpgS9ZL:jpu3qOVUHMA/8aFU6cd3QQpgSv

  Score

  10^/10

  hookinfostealerratstealthtrojan

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Acquires the wake lock

  • Reads information about phone network operator.

  behavioral1behavioral2behavioral3