General
-
Target
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2
-
Size
1.1MB
-
Sample
240224-l63r9agf28
-
MD5
a9cb55488b48219352f8c0eb7b5c3b72
-
SHA1
5bd952beda27c8c16d88a3ac5e55a1ff9f1e67ef
-
SHA256
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2
-
SHA512
9fb71720a0a6322e2d86fa349cb9c5dcdc78fe2e2f93601d403bf4ea1b87488d0b8006e3b0dd5cf29d08d6f525f919e9fa47e13c7bb9cd54b48fab8622f6e246
-
SSDEEP
24576:f0AVatewyf+fWGsGzGYPz2LXR5yPkoMOgSYv:M+j2fWGPXyDD2TgSE
Behavioral task
behavioral1
Sample
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
hook
http://93.123.39.169
Targets
-
-
Target
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2
-
Size
1.1MB
-
MD5
a9cb55488b48219352f8c0eb7b5c3b72
-
SHA1
5bd952beda27c8c16d88a3ac5e55a1ff9f1e67ef
-
SHA256
7c7e4213746a2816953fc46ce73e69a1b38ded44263a810a4eaedde8511800a2
-
SHA512
9fb71720a0a6322e2d86fa349cb9c5dcdc78fe2e2f93601d403bf4ea1b87488d0b8006e3b0dd5cf29d08d6f525f919e9fa47e13c7bb9cd54b48fab8622f6e246
-
SSDEEP
24576:f0AVatewyf+fWGsGzGYPz2LXR5yPkoMOgSYv:M+j2fWGPXyDD2TgSE
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Reads information about phone network operator.
-