Analysis
-
max time kernel
150s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
20-02-2024 14:40
General
-
Target
app-release-2.apk
-
Size
1.1MB
-
MD5
7c29721ae5193bfd4441b1761d584411
-
SHA1
acaea84348eda0df39bb908859627cebb3e22a48
-
SHA256
80fb4a2bfab1f0675eae40210a899a30987241cbb2b9497eb753668f433682b3
-
SHA512
0d7dfa4be7596e0ad174f27d79193b008608735ca92dfaf1d06abc74a18a00c3837f19a5623fa0cf122b853eaeade72d0d8fa2d0e3f98b4db01585a88a6088bb
-
SSDEEP
24576:x+iQHis9qSTp73z5HbjJe0HIbTzB0TlOk/ojy3fg/s4wJ:x+iai+q+xz1Y0HI3zBIJ/X3fg/iJ
Malware Config
Extracted
hook
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.bofevacotexi.jepula1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD551f1a02ecbb36b5ba361a0d3b83bd27a
SHA1a617bbb028c305041aabb7db486d9e24f94e6484
SHA256b5c06b1bb181d353c8353ac58dd6448013fc1cda386ba271c78b8ea40a014ded
SHA5127fed3355020140daae7e649162f8630b07a5b6ad21cefc2524ac4e2ff8157e2306b3762ff71d0f55d616ff44431b777839ec148c6ca63683b1e47debe89cebd5
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD552138db1ca995c2761cd18b2d4b0d0c4
SHA1dcaf4cdadb46f0189a0747113e31b0ca1bd0db06
SHA2565a45e3e742fc059ead0a7a5658f3348d9390aa1d7740bc9ca95293d36048c4f5
SHA5122179148257714ebc156b6dd5d227f4d8ce54cf88fad77bd8d8605d4270f1cf0f7023ffc66cf5640d4268aeee934f61ae7b4bfb9aea60a91f69ba039142398e6b
-
Filesize
108KB
MD55a57203a83f4c105161de0891d909d6f
SHA1d13f50f85795fc57477b7ea4ca831c2669579f9c
SHA2566c3692fc2be34b4d98afce20f5e0a2bbe147e20d083345b673174da762709224
SHA512572145c225e0caa2d780045fd89d4cbf028cdb9a83a51409ce0b59c7440a1ceddeaab8cf72fe58b17a569d80d5da7ef5751b690b8521098cbd733fcd6d3a98d8
-
Filesize
173KB
MD51560e61c2572e16605f5961b4d7d35c0
SHA1e1c672433289509f1b61b98a884d8f44718f1aca
SHA25622ed65bb2cf36dcc356a682a3d3d2c860ea0b62cea9c1aa609c2eb191b171f9a
SHA512de87b1f8c077594ade2dd7debdcd84d8ec8f02a881325b9a73c7553bfa1f8b5b6e529c811a65106ce71e74ac4f441f5c98c133aa502c74e2370c84190f004d35