General

  • Target

    dbd8366157d0bbc61a55335d95f595882611ada6ae0acefdd344ec40eba8e9d7

  • Size

    2.8MB

  • Sample

    240314-kx4grafg4s

  • MD5

    4e0e33d1fa3467cd88e4ced9cdea8077

  • SHA1

    3ddb1492fef6b0951c172a307f759f3dc962e2a0

  • SHA256

    dbd8366157d0bbc61a55335d95f595882611ada6ae0acefdd344ec40eba8e9d7

  • SHA512

    8a91faa21cd9b67103b8ac445d36c698f7d729d7704c8d61407cf1a8612ff68dae8c1c4ff23c73fd82c4090ef82de688a10a5b38de1f0f06b2133d47a73e0978

  • SSDEEP

    49152:Pi2q5Mqa4wh8vEZLi5APc/fbmFY8wGfFF5R2o0Rnw0rw2pl3Ft4y4X3wmAC6lg/q:alRavrg5APwbmFY8wGbD2o0lDw2f34RW

Malware Config

Extracted

Family

hook

C2

%INSERT_URL_HERE%

Targets

    • Target

      dbd8366157d0bbc61a55335d95f595882611ada6ae0acefdd344ec40eba8e9d7

    • Size

      2.8MB

    • MD5

      4e0e33d1fa3467cd88e4ced9cdea8077

    • SHA1

      3ddb1492fef6b0951c172a307f759f3dc962e2a0

    • SHA256

      dbd8366157d0bbc61a55335d95f595882611ada6ae0acefdd344ec40eba8e9d7

    • SHA512

      8a91faa21cd9b67103b8ac445d36c698f7d729d7704c8d61407cf1a8612ff68dae8c1c4ff23c73fd82c4090ef82de688a10a5b38de1f0f06b2133d47a73e0978

    • SSDEEP

      49152:Pi2q5Mqa4wh8vEZLi5APc/fbmFY8wGfFF5R2o0Rnw0rw2pl3Ft4y4X3wmAC6lg/q:alRavrg5APwbmFY8wGbD2o0lDw2f34RW

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks