Extracted

• • Target
    2edc7cbc0dce61739a4d977acd8b6e6940a817d4e698cbccaa8ce1ddbe0a7bbc.apk
  • Size 11.9MB
  • SHA256 2edc7cbc0dce61739a4d977acd8b6e6940a817d4e698cbccaa8ce1ddbe0a7bbc
  • MD5 3f95de9793139f4c490a83fa46e3c6a8
  • SHA1 00ac807c434389424759c6abe9042c0026f25c3b
  • SHA512 95db2498fa24b7a3d0e304a4983723e6d19182d4c996b1edd5f1093dfd1d68225efba50fb877a36aa9cdee16cc1537063def6f23c45bbf11c3809c6748741f9e
  • SSDEEP 196608:iw4yh/fl+gKp7U99K3K8BPIk2Ok85uKB/rsjO2JDKORsLw8I4:X4Ad+gKpHa8BQk2O14KBTsqwDKORsLI4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  collectioncredential_accessdefense_evasiondiscoveryredhookinfostealerrattrojan

  • RedHook

    RedHook is an Android banking trojan first seen in January 2025.

    trojaninfostealerratredhook

  • Redhook family

    redhook

  • Checks if the Android device is rooted.

    defense_evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Reads information about phone network operator.

    discovery

  • Listens for changes in the sensor environment (might be used to detect emulation)

    defense_evasion
  behavioral1