Overview

overview

10

Static

static

8

db6246bd10...2a.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db6246bd102fdfa9614a9fa5968362c5de8a3bb1cd23b5740392210d20a7d22a

  • Size

    3.7MB

  • Sample

    210930-s2q18aaber

  • MD5

    282b35ed9551c6f79e123bb2d2a956fb

  • SHA1

    a92dd02afb3780bfb5d0e1b9dc845d0325c59ddf

  • SHA256

    db6246bd102fdfa9614a9fa5968362c5de8a3bb1cd23b5740392210d20a7d22a

  • SHA512

    36c4774de4e1c2ecac8dc2cd5502152d25352bf595de41634a478879819cd41c89e913960c704cb6ca1943741da9be34d9b008e3f6cf9061a61860b18de34b0b

Score
10/10
ermacandroidbankerinfostealerransomwaretrojan

Malware Config

Targets

    • Target

      db6246bd102fdfa9614a9fa5968362c5de8a3bb1cd23b5740392210d20a7d22a

    • Size

      3.7MB

    • MD5

      282b35ed9551c6f79e123bb2d2a956fb

    • SHA1

      a92dd02afb3780bfb5d0e1b9dc845d0325c59ddf

    • SHA256

      db6246bd102fdfa9614a9fa5968362c5de8a3bb1cd23b5740392210d20a7d22a

    • SHA512

      36c4774de4e1c2ecac8dc2cd5502152d25352bf595de41634a478879819cd41c89e913960c704cb6ca1943741da9be34d9b008e3f6cf9061a61860b18de34b0b

    Score
    10/10
    ermacbankerinfostealerransomwaretrojan

    • Ermac

      An android banking trojan first seen in July 2021.

      bankertrojaninfostealerermac

    • Ermac Payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks