General
-
Target
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.bin
-
Size
3.8MB
-
Sample
240225-1xjeksde86
-
MD5
508280b8a33592fe3e3ec3bab918998b
-
SHA1
72956fc4394e95b0eef71dd330ef27d453cd2c36
-
SHA256
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59
-
SHA512
f2eaaeb36ce04115ce8fb9b45ffb8bef7d4aaf46ae7b6b01065c053c31556f5271d789e8557a3af8c83962e005da4abfd63067fd480fc5acf3cb52bb6a4ce311
-
SSDEEP
98304:R+hJ+I8GYJHVY+JTkijX+v037UcLUuQwy:ghkIEE8TkijX+8pUuS
Behavioral task
behavioral1
Sample
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
hook
http://91.92.250.168:3434
Targets
-
-
Target
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.bin
-
Size
3.8MB
-
MD5
508280b8a33592fe3e3ec3bab918998b
-
SHA1
72956fc4394e95b0eef71dd330ef27d453cd2c36
-
SHA256
560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59
-
SHA512
f2eaaeb36ce04115ce8fb9b45ffb8bef7d4aaf46ae7b6b01065c053c31556f5271d789e8557a3af8c83962e005da4abfd63067fd480fc5acf3cb52bb6a4ce311
-
SSDEEP
98304:R+hJ+I8GYJHVY+JTkijX+v037UcLUuQwy:ghkIEE8TkijX+8pUuS
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Reads information about phone network operator.
-