Overview

overview

10

Static

static

10

0121588ca4...2f.apk

android-9-x86

10

0121588ca4...2f.apk

android-10-x64

10

0121588ca4...2f.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0121588ca4de977d77b3492af120588890cf758924fdb3412b780879d8d2192f

  • Size

    3.3MB

  • Sample

    240314-ktv17sfe8t

  • MD5

    8d958576257733bd78fe81f84e768ed1

  • SHA1

    cd19e464b30b42d80a532cd994828696dc5f7b9b

  • SHA256

    0121588ca4de977d77b3492af120588890cf758924fdb3412b780879d8d2192f

  • SHA512

    9352203c5c06e69a2521041f3eb4751af80295ac50828b3e6a7d653198e6fb4db671b2fa214e3e3c166cf2a4c22ef54a5e87e40d6ce145a32a5c23b71a487683

  • SSDEEP

    98304:TAxM4GZm5vjgae1B4IIDjl5OMxeAPuYXv+r5Pd:xZwMaQ4ImlAYeQuYXv+r5F

Score
10/10
ermachookandroidcollectiondiscoveryevasioninfostealerrattrojan

Malware Config

Extracted

Family

hook

C2

http://77.246.108.116:3434

AES_key

Targets

    • Target

      0121588ca4de977d77b3492af120588890cf758924fdb3412b780879d8d2192f

    • Size

      3.3MB

    • MD5

      8d958576257733bd78fe81f84e768ed1

    • SHA1

      cd19e464b30b42d80a532cd994828696dc5f7b9b

    • SHA256

      0121588ca4de977d77b3492af120588890cf758924fdb3412b780879d8d2192f

    • SHA512

      9352203c5c06e69a2521041f3eb4751af80295ac50828b3e6a7d653198e6fb4db671b2fa214e3e3c166cf2a4c22ef54a5e87e40d6ce145a32a5c23b71a487683

    • SSDEEP

      98304:TAxM4GZm5vjgae1B4IIDjl5OMxeAPuYXv+r5Pd:xZwMaQ4ImlAYeQuYXv+r5F

    Score
    10/10
    hookcollectiondiscoveryevasioninfostealerrattrojan

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

      rattrojaninfostealerhook

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasion

    • Acquires the wake lock

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks