Extracted

• • Target

    5789aeb0d77bd94cb024c2baeda436ee0361ecf68b474a8185a933b5dee000ce.bin

  • Size

    1.9MB

  • MD5

    4801b59592e9a335cef4a3e210f38c68

  • SHA1

    089cb14e41feec7fcffa1ca934f15db33d5bae90

  • SHA256

    5789aeb0d77bd94cb024c2baeda436ee0361ecf68b474a8185a933b5dee000ce

  • SHA512

    23d052f51fb2fc48b7f5fd77f1f5d69a6ed1e0ddcf82c3ba74b0aa26bdacb38f6893c06eb4aa6b648a84a6e3ca1f977f2c4722831c89f67b386f3a2c7ecfc4d4

  • SSDEEP

    49152:WEmKrjPT0dWF05dLMVTFdr4pstRMhE5cJ5nh2:JPP4dWWbMVTFdr4ePh5c2

  Score

  10^/10

  hookbankerinfostealerratstealthtrojan

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    banker

  • Removes its main activity from the application launcher

    stealthtrojan

  • Acquires the wake lock

  • Reads information about phone network operator.

  behavioral1behavioral2behavioral3