Analysis
-
max time kernel
47s -
max time network
162s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
-
submitted
02-05-2024 00:53
General
-
Target
e07fd729182650c77f29293c6e4522c5.apk
-
Size
1.1MB
-
MD5
e07fd729182650c77f29293c6e4522c5
-
SHA1
9e0c183e6ef61953cea9d29bf4fc6ea2cbd8a164
-
SHA256
697a13b1358a09008afcf17117a04cb253a11a30cd24944be1c60a4696dc27f0
-
SHA512
8673e7b983773e58f83d4a75b7a7cc7dbb6d0bfcc16d47848800cd491fb224880e1867fe198ac35f3dec496f2154a5792539bfa2e27cb557336331379e86dca7
-
SSDEEP
24576:sbKs3t7YSbMlettFATgZYfw20V/ojyx5g/Qn2q:zW5YSRFATgyfw2E/Xx5g/7q
Malware Config
Signatures
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Makes use of the framework's Accessibility service 4 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.lexohiludulefu.jojuxewu1⤵
- Makes use of the framework's Accessibility service
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Requests enabling of the accessibility settings.
- Acquires the wake lock
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5c70ce27110f11425089202d42ce05b6b
SHA120fd7878c5c3302aed824da78e29c1e4494e7c2b
SHA2565f3ac8f5908a1c3f98eae2a78a876848f3fe50c6cdd4feb358ada5648c17bbd6
SHA512f0ca058dd98a9a39df8f9e867223a569a6580bdc1e4fda6056976d676c7769f0e2ebda5db9a8d9779a762a2129ae009554dc1b4448abd077e7e8e0ee29304258
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5aa9edcba14d07e7e1b64a4f030597025
SHA16238ba11cc97606d36c5d9d98702d2efc781a140
SHA256467b769cf078ab249cb79e8ef89d4f3a6e6864fac8abbba516835fbba79360c2
SHA512fdad817520cceb9b5dba0a37362309d9daf23317bb50a0d27f9df114873d82a5e199ebae07e7146cea7748e2472004e13cfba90c1bc0e276bef6dca9b0ade917
-
Filesize
108KB
MD5f44e55fc3b558a1b2e3139d2ec022da9
SHA1030e28b456bb28b271cab7e3e02911039c64c807
SHA25637611817463e8e3bfaae8c4942f8c5c0273e073577532907843a112db85830a6
SHA512df08b41ced2bbe9d63f448e9fd6af4c94772a7b442ed66710efec1ac69cb0f93488a5971b13012b5fa6cca79f98abce4eb5719526efc90d0ac310e80d3cb43d4
-
Filesize
173KB
MD5507b778ac808504f85b8d9cc66e6d41f
SHA15d46b9d30957c124ce56906530edb75f031c7836
SHA25670a435e1e5aa05f889c5bd3fa1b0a28ff862c92c912a3bac5b1f05f84b5243d1
SHA512c82477b996cde46052e28775ecb0c20b1536fb6be70fe0f01edac8d649c62a9682d59350c11517e8443d4e74165153fd8ac98ee13c1d198e81dbdd582bcbd34b