General
-
Target
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff
-
Size
3.6MB
-
Sample
240313-qtdptaff93
-
MD5
5d391a83a4c4f2e11bd9af3fce04118b
-
SHA1
1e373a16fa1e27c17ac42ec9e2f638ee5d8dfd11
-
SHA256
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff
-
SHA512
d4ff82ca5f835f360e0b1f2c312537890054d21ea168e7cbd628ca85a762ae6d0f628a24609525f95b7f7c8293d30354a1fd8f16e86cb536e1f1d0ea44ae6a27
-
SSDEEP
98304:0ZQ6ESsYwdh29tDVnyFSQRH7JSaV2ShayXLe:JJPdQtVrCbL2ShaJ
Behavioral task
behavioral1
Sample
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
hook
http://127.0.0.1:3434
Targets
-
-
Target
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff
-
Size
3.6MB
-
MD5
5d391a83a4c4f2e11bd9af3fce04118b
-
SHA1
1e373a16fa1e27c17ac42ec9e2f638ee5d8dfd11
-
SHA256
ed0558cfbfbbffab7bfc500f5a458bf08178ab1a9ee08b79c7e9c1edb21442ff
-
SHA512
d4ff82ca5f835f360e0b1f2c312537890054d21ea168e7cbd628ca85a762ae6d0f628a24609525f95b7f7c8293d30354a1fd8f16e86cb536e1f1d0ea44ae6a27
-
SSDEEP
98304:0ZQ6ESsYwdh29tDVnyFSQRH7JSaV2ShayXLe:JJPdQtVrCbL2ShaJ
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Reads information about phone network operator.
-