Analysis

  • max time kernel
    928903s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    30-09-2021 15:37

General

  • Target

    db6246bd102fdfa9614a9fa5968362c5de8a3bb1cd23b5740392210d20a7d22a.apk

  • Size

    3.7MB

  • MD5

    282b35ed9551c6f79e123bb2d2a956fb

  • SHA1

    a92dd02afb3780bfb5d0e1b9dc845d0325c59ddf

  • SHA256

    db6246bd102fdfa9614a9fa5968362c5de8a3bb1cd23b5740392210d20a7d22a

  • SHA512

    36c4774de4e1c2ecac8dc2cd5502152d25352bf595de41634a478879819cd41c89e913960c704cb6ca1943741da9be34d9b008e3f6cf9061a61860b18de34b0b

Malware Config

Signatures

  • Ermac

    An android banking trojan first seen in July 2021.

  • Ermac Payload 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.qyouyvieqsyf.wotpln
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5058
    • com.qyouyvieqsyf.wotpln
      2⤵
        PID:5087
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:5087

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads