Extracted

• • Target

    2b1ec76a384f7352d7efdada26eadac55e2cfb15bf3f0f6b93e5b0ec7a5e9755.bin

  • Size

    1.2MB

  • MD5

    74c85bba05db7cc8c8d4ba59bd8d6466

  • SHA1

    c64203af82bc4a194a337e379b19d07060dea054

  • SHA256

    2b1ec76a384f7352d7efdada26eadac55e2cfb15bf3f0f6b93e5b0ec7a5e9755

  • SHA512

    c04bcb67427880d7dbc3c404dec38853012e3e91c4633a2a5e7f9d4f8ed9bbb5204a0106f14f399ac3c7ab3198120df3a2272265a67718375a86250c36518c3c

  • SSDEEP

    24576:I23tyREyhg45RJiL8s5F71kn7OH41ZJLgSkDX:I23Wh15RJiLvJN2zgSC

  Score

  10^/10

  hookcollectiondiscoveryevasioninfostealerrattrojan

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion

  • Requests enabling of the accessibility settings.

  • Acquires the wake lock

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3