From ERMAC to Hook: Investigating the technical differences between two Android malware variants