Analysis
-
max time kernel
57s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
20-02-2024 14:34
General
-
Target
app-release-1.apk
-
Size
1.1MB
-
MD5
1cd342f1997e96a6a4dec368829e5c4a
-
SHA1
2cd526ac9e309e58a0c912c96811328574f5d530
-
SHA256
a20b0e36403da3938aa676fa16f6df5b22e88780885ad27334a2dd6235defde3
-
SHA512
ecd8a1915751a43d7b4b5b5518a7f3757c7dfb4370108cc11f7bbdf1fc9ae4e3d807f99600fcfaab5f760c22338ebc8a41dec445a40b22ee719e33010682c982
-
SSDEEP
12288:YwtL9wW7yqrNoM1gMJcNizhRelhMffcNKSRRQ6ZCUbu+Cn1Zop31ySFEBYgA4qDg:YwQMmM1oi2ONSR34UU/ojy7Yg/2yGWR
Malware Config
Extracted
hook
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.wadovivuyitobi.lomi1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5c64e05b7a1cd7db9b795f7bb83cc4d24
SHA1bd3dd64a649c9a979726d3a9df914b7f2782dc7b
SHA256b12ad944dd63ee1b7a0573293f3fea0ae3f615d8cc14c2983c447218f7c363fa
SHA51214870358478a4f312ff1cd9349502b949d16e9f36715e220328dfdd18c0d160f72e8d5ed78cc96ebd5da3c9fc0f6b8afed83421bc5570dfe7c0642b3d56e782a
-
Filesize
16KB
MD5249f7af7b1b4585da0df6dc0cbfa17fc
SHA11961aea4762811c3e017653c2a55b9d509833aaf
SHA25644993aebfccc7c7e3f18aa85643ad43f9acc1e0c9bb0b3ed0182f0ddfa71b026
SHA512777a6c3c638b0baa57af1ba66907b48f153632480902fd86d5ae1c1059989dd659fb627bf7375892a56514b45f520eb13649811b9cedaf7eedf7d66d26722e8a