Overview

overview

10

Static

static

8

2de0f59fd0...9d.apk

android_x86

10

Resubmissions

28-09-2021 10:19

210928-mc171abgaj 10

28-09-2021 09:45

210928-lrjqtsbdh6 8

Analysis

  • max time kernel
    736993s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    28-09-2021 10:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2de0f59fd03512e5527c8b8b19595483564ae54cd4904457c4f5bf127949019d.apk

  • Size

    3.5MB

  • MD5

    678317ea1af55da1cddab31417a3c173

  • SHA1

    07f0fb32e675ae022c96a54ac4ed7aa0c21c052d

  • SHA256

    2de0f59fd03512e5527c8b8b19595483564ae54cd4904457c4f5bf127949019d

  • SHA512

    b135fbedddfb0c1942a59ac016159273ad0f50b717412520a22b48bc2c953134033930dcd751fc7018abcf765908f954f27b5b0f1ba323a914e090cd232a6df7

Score
10/10
ermacbankerinfostealerobfuscationransomwaretrojan

Malware Config

Signatures

  • Ermac

    An android banking trojan first seen in July 2021.

    bankertrojaninfostealerermac
  • Ermac Payload 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware
  • Uses reflection 47 IoCs
    obfuscation

Processes

  • com.hxfumpfgokky.bufvpk
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    • Uses reflection
    PID:4885
    • com.hxfumpfgokky.bufvpk
      2⤵
        PID:4916
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:4916

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/MultiDex.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/base.apk.classes1.zip
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/base.apk.classes1.zip
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/base.apk.classes1.zip.x86.flock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/oat/x86/base.apk.classes1.odex
      MD5

      e346b8dda84216c33ee289e3ad4b667e

      SHA1

      d2851dbcbdc97697e8020194ff98079526a27ca2

      SHA256

      4dd9950e69058132cff535b9c0f5a461b806c0a92e826bf922dd46375f51e032

      SHA512

      ede303ba808d4c506ded872d1728837224169410b4d7ae2ee417c52da7f985e2748503733514df460d76219fe063640a500222dc88a57003172f3b20eb683325

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/oat/x86/base.apk.classes1.vdex
      MD5

      00590640944a883535461492653b2046

      SHA1

      b042c8fabddd71f89c56fcc14120c8200ba6661a

      SHA256

      78bfa3f61417b0ac6c5a706020a2b851afd6a0ff2c0b8fe58a5e314a645fce88

      SHA512

      db2633e305c9ace525fcf925bcc9ae2850bd570de9fc7148340dc85b284d336f70c5c764213be1e5693fb6e10fcebd43d9a2f8e975f889cd926367156ec7b405

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/tmp-base.apk.classes9052009917937528827.zip
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.hxfumpfgokky.bufvpk/shared_prefs/multidex.version.xml
      MD5

      268077fa8e35d06452d10d1be0258481

      SHA1

      20d7d95a5a14bf9232a84b33eecb93905b8c554b

      SHA256

      74deb316eebd7b81ac60eb79fb920a4fc64e96b7e94040afdca6c5b09a25668b

      SHA512

      ab3c8e459f525e552e5cfd87430b0ee3c2511605fe68bfe63be3faa9dc63c9c42a805ff523ef208ba248f29d6ee88ad811c2731179a06d7affbf35204a1237d6

      Download Submit