Extracted

• • Target
    chinhphu.apk
  • Size 12.7MB
  • SHA256 ebc4bed126c380cb37e7936b9557e96d41a38989616855bb95c9107ab075daa3
  • MD5 7d3194790e30f8ca6f0b8c4c0cb26b5f
  • SHA1 fbab438686c1e655d282079c09d6de3a7a8c6dd2
  • SHA512 2dac3302d32d1755514641656ee86b99556727c0f82be8004bb52d43f6f61eb23d8229931b68540d6b0ce82ba5bfabb34a7005ce0065f69d16255322942c7373
  • SSDEEP 393216:lkm/x3frqizIamc3HKBIsCIDKORsRK9VE:lkUJIamc66sfDKOqIY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redhookcollectioncredential_accessdefense_evasiondiscoveryinfostealerpersistencerattrojan

  • RedHook

    RedHook is an Android banking trojan first seen in January 2025.

    trojaninfostealerratredhook

  • Redhook family

    redhook

  • Checks if the Android device is rooted.

    defense_evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Reads information about phone network operator.

    discovery

  • Listens for changes in the sensor environment (might be used to detect emulation)

    defense_evasion
  behavioral1behavioral2behavioral3behavioral4behavioral5