General

  • Target

    f572507ff9ee880fd5d69464a664571d3eecb9a04e48ad0f165c6f804aeb47bf.bin

  • Size

    1.1MB

  • Sample

    240219-1xtwbaeg97

  • MD5

    eb61c894491a192894ef5fdbd3050fba

  • SHA1

    c416ebd5c6a51ed1e42756f0e99420fd6541cce9

  • SHA256

    f572507ff9ee880fd5d69464a664571d3eecb9a04e48ad0f165c6f804aeb47bf

  • SHA512

    82c211adb2b7b9cbd8946dc14514c8672127eed5e63d78ca29c7cf9c3e7796886ad2223235790e4a1b3f965fbd362a30db89d81975749d5deea6818ad0ed0591

  • SSDEEP

    24576:wdcIPWAeDMNPJdLVOk1ipG2lB7jzY48ojyun3g/lnN5:wpPWuJqAipG47jzSXun3g/n5

Malware Config

Extracted

Family

hook

C2

http://163.5.169.11:3434

AES_key

Targets

    • Target

      f572507ff9ee880fd5d69464a664571d3eecb9a04e48ad0f165c6f804aeb47bf.bin

    • Size

      1.1MB

    • MD5

      eb61c894491a192894ef5fdbd3050fba

    • SHA1

      c416ebd5c6a51ed1e42756f0e99420fd6541cce9

    • SHA256

      f572507ff9ee880fd5d69464a664571d3eecb9a04e48ad0f165c6f804aeb47bf

    • SHA512

      82c211adb2b7b9cbd8946dc14514c8672127eed5e63d78ca29c7cf9c3e7796886ad2223235790e4a1b3f965fbd362a30db89d81975749d5deea6818ad0ed0591

    • SSDEEP

      24576:wdcIPWAeDMNPJdLVOk1ipG2lB7jzY48ojyun3g/lnN5:wpPWuJqAipG47jzSXun3g/n5

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks