Extracted

• • Target

    dbd8366157d0bbc61a55335d95f595882611ada6ae0acefdd344ec40eba8e9d7

  • Size

    2.8MB

  • MD5

    4e0e33d1fa3467cd88e4ced9cdea8077

  • SHA1

    3ddb1492fef6b0951c172a307f759f3dc962e2a0

  • SHA256

    dbd8366157d0bbc61a55335d95f595882611ada6ae0acefdd344ec40eba8e9d7

  • SHA512

    8a91faa21cd9b67103b8ac445d36c698f7d729d7704c8d61407cf1a8612ff68dae8c1c4ff23c73fd82c4090ef82de688a10a5b38de1f0f06b2133d47a73e0978

  • SSDEEP

    49152:Pi2q5Mqa4wh8vEZLi5APc/fbmFY8wGfFF5R2o0Rnw0rw2pl3Ft4y4X3wmAC6lg/q:alRavrg5APwbmFY8wGbD2o0lDw2f34RW

  Score

  10^/10

  hookcollectiondiscoveryevasioninfostealerrattrojan

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion

  • Acquires the wake lock

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3