Overview

overview

10

Static

static

10

8d20189cd3...52.apk

android-9-x86

10

8d20189cd3...52.apk

android-10-x64

10

8d20189cd3...52.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d20189cd3865e13ce0c943b72472600308b40db54080c45d6b84117b69a6d52

  • Size

    1.1MB

  • Sample

    240314-kxt83sfg3v

  • MD5

    f6c6e7b69ba6026646d229757a7c0dcd

  • SHA1

    af240d54bc5c9f31646da0a220e0679b0acb194e

  • SHA256

    8d20189cd3865e13ce0c943b72472600308b40db54080c45d6b84117b69a6d52

  • SHA512

    b0220f3171cda248a3306547c58fb52323467553cca7290e1c3ccb78855b4244b1c45576508f42f86c76c1352dbf5148156aa62251320d07e6bb7346cbe2c2dd

  • SSDEEP

    24576:NUlxsCIH/aelw2APkxE5ecT6AEVj3nIg/SsDl:NmxsfaAx+kMCBnIg/1

Score
10/10
ermachookandroidcollectiondiscoveryevasioninfostealerrattrojan

Malware Config

Extracted

Family

hook

C2

%INSERT_URL_HERE%

Targets

    • Target

      8d20189cd3865e13ce0c943b72472600308b40db54080c45d6b84117b69a6d52

    • Size

      1.1MB

    • MD5

      f6c6e7b69ba6026646d229757a7c0dcd

    • SHA1

      af240d54bc5c9f31646da0a220e0679b0acb194e

    • SHA256

      8d20189cd3865e13ce0c943b72472600308b40db54080c45d6b84117b69a6d52

    • SHA512

      b0220f3171cda248a3306547c58fb52323467553cca7290e1c3ccb78855b4244b1c45576508f42f86c76c1352dbf5148156aa62251320d07e6bb7346cbe2c2dd

    • SSDEEP

      24576:NUlxsCIH/aelw2APkxE5ecT6AEVj3nIg/SsDl:NmxsfaAx+kMCBnIg/1

    Score
    10/10
    hookcollectiondiscoveryevasioninfostealerrattrojan

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

      rattrojaninfostealerhook

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasion

    • Acquires the wake lock

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks