General
-
Target
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b
-
Size
2.8MB
-
Sample
240314-kxpnlafg2y
-
MD5
dd1d59363757b52f1a3139847fc30890
-
SHA1
38db10d0719d2fdc438deea7ea8fd8e4facdad4f
-
SHA256
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b
-
SHA512
b23d5ee3aa0f1d277c53bf6d502d805a57e640679488ba03c4f68d4a882f9de6cbb1455e30eefff5181d1f5177178f2f7062c168d28204b3d0509438bef768f6
-
SSDEEP
49152:nozl7D4fxxqNsvuha+i4bLkzLfGqg8k9IZKxfVf65q4h5xxKAC6lg/In:ozls3hiaR4bLkfuqCsKxfV65q47xxDCk
Behavioral task
behavioral1
Sample
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
hook
%INSERT_URL_HERE%
Targets
-
-
Target
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b
-
Size
2.8MB
-
MD5
dd1d59363757b52f1a3139847fc30890
-
SHA1
38db10d0719d2fdc438deea7ea8fd8e4facdad4f
-
SHA256
cb0851d5c0b5890708efa8d9b745a27f64c4fcdef87179067787dd8ea44e220b
-
SHA512
b23d5ee3aa0f1d277c53bf6d502d805a57e640679488ba03c4f68d4a882f9de6cbb1455e30eefff5181d1f5177178f2f7062c168d28204b3d0509438bef768f6
-
SSDEEP
49152:nozl7D4fxxqNsvuha+i4bLkzLfGqg8k9IZKxfVf65q4h5xxKAC6lg/In:ozls3hiaR4bLkfuqCsKxfV65q47xxDCk
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Reads information about phone network operator.
-