General

  • Target

    b362840bd046d1bd4632ce0cc5409feea4ef868f1f8f3ef1d6cb726a44b280f2

  • Size

    1.1MB

  • Sample

    240209-kv5a9shh9w

  • MD5

    ee65a8788025a0cbda72696c330bf315

  • SHA1

    8cd6f2398e3ac34a3ae30d4cbfe56385b10987a2

  • SHA256

    b362840bd046d1bd4632ce0cc5409feea4ef868f1f8f3ef1d6cb726a44b280f2

  • SHA512

    b570ea1b0ca3a1252e2601532022639efa6efa1ada8885413ef933defaee73ce1cd44651a7fc6ec7086fdbcee47ae566d5e045dbbfef4312351bb015bf6a0f8c

  • SSDEEP

    24576:MJwCWpW6tMjahNNIDQpK7GFbwjojyGE2g/hVT2:MJwjtMjahNRlwjXd2g/32

Malware Config

Extracted

Family

hook

C2

http://93.123.39.235:3434

AES_key

Targets

    • Target

      b362840bd046d1bd4632ce0cc5409feea4ef868f1f8f3ef1d6cb726a44b280f2

    • Size

      1.1MB

    • MD5

      ee65a8788025a0cbda72696c330bf315

    • SHA1

      8cd6f2398e3ac34a3ae30d4cbfe56385b10987a2

    • SHA256

      b362840bd046d1bd4632ce0cc5409feea4ef868f1f8f3ef1d6cb726a44b280f2

    • SHA512

      b570ea1b0ca3a1252e2601532022639efa6efa1ada8885413ef933defaee73ce1cd44651a7fc6ec7086fdbcee47ae566d5e045dbbfef4312351bb015bf6a0f8c

    • SSDEEP

      24576:MJwCWpW6tMjahNNIDQpK7GFbwjojyGE2g/hVT2:MJwjtMjahNRlwjXd2g/32

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks