General

  • Target

    560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.bin

  • Size

    3.8MB

  • Sample

    240225-1xjeksde86

  • MD5

    508280b8a33592fe3e3ec3bab918998b

  • SHA1

    72956fc4394e95b0eef71dd330ef27d453cd2c36

  • SHA256

    560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59

  • SHA512

    f2eaaeb36ce04115ce8fb9b45ffb8bef7d4aaf46ae7b6b01065c053c31556f5271d789e8557a3af8c83962e005da4abfd63067fd480fc5acf3cb52bb6a4ce311

  • SSDEEP

    98304:R+hJ+I8GYJHVY+JTkijX+v037UcLUuQwy:ghkIEE8TkijX+8pUuS

Malware Config

Extracted

Family

hook

C2

http://91.92.250.168:3434

AES_key

Targets

    • Target

      560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59.bin

    • Size

      3.8MB

    • MD5

      508280b8a33592fe3e3ec3bab918998b

    • SHA1

      72956fc4394e95b0eef71dd330ef27d453cd2c36

    • SHA256

      560bada1b98136b64cb55b33eb6193351d7429d7fbe5a116d2d5f1e20acb0e59

    • SHA512

      f2eaaeb36ce04115ce8fb9b45ffb8bef7d4aaf46ae7b6b01065c053c31556f5271d789e8557a3af8c83962e005da4abfd63067fd480fc5acf3cb52bb6a4ce311

    • SSDEEP

      98304:R+hJ+I8GYJHVY+JTkijX+v037UcLUuQwy:ghkIEE8TkijX+8pUuS

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks