Extracted

• • Target

    9f48b10023f35097e883c7b02ba68166ea9412d2ec2684ca20c1ae38fbe42081.bin

  • Size

    1.2MB

  • MD5

    0a1e564fd5962490e45bcb8d71ea6283

  • SHA1

    ab113e8397243f6c6f86cc3ac3a7ff4546c5fa6b

  • SHA256

    9f48b10023f35097e883c7b02ba68166ea9412d2ec2684ca20c1ae38fbe42081

  • SHA512

    f9299a04668114168824e6bf7248a8b6ecc30e455b9a9bcff845e7d62018ff029f43e0f36f40f7a69fc8a9940cdb42bd153f3f81d327ac85ba3d84c9132a164d

  • SSDEEP

    24576:Cz9XJxtkyhg45RJiL8s5F71kn7OH41ZNbgSkDXQ:Cz97bh15RJiLvJN2HgSKQ

  Score

  10^/10

  hookcollectiondiscoveryevasioninfostealerrattrojanstealth

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Requests enabling of the accessibility settings.

  • Acquires the wake lock

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3