Analysis
-
max time kernel
1050963s -
max time network
68s -
platform
android_x64 -
resource
android-x64-20220621-en -
resource tags
-
submitted
27-07-2022 07:51
General
-
Target
36.apk
-
Size
2.2MB
-
MD5
366134f007de0bede5afb773774c4064
-
SHA1
62bec235f1067baf34a0d0b93dfb63e554e65071
-
SHA256
739d83c8ca63e674d56bc4c6024eac790d66d460c27437f47009fed834d47feb
-
SHA512
11b8f919c2a2b92d3e8d48a4f586bf5c13123e976bb4980372f80d57bf43b65e8fdd04e69f4cd1c3a293da58c69cc7d4a0fcc4b4cdb5fa4f521f54a0011caa1a
Malware Config
Extracted
ermac
Signatures
-
Ermac
An Android banking trojan first seen in July 2021.
-
Ermac2 payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.majosiwuxexeku.poniva1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
456KB
MD5c8dd7c66784ff7c7a55a0f018d5ba5e7
SHA1f848b1a001bbc32709b6b229fdb460274d161167
SHA2566243db51ab4a20ce9c8c5c59235347094c222e162944ce0b0958177c24f81f71
SHA51233ba5c2c642deabbd306d80530499545148f2e2b14d8599fe4e986709990cb1a301bff6f0b11ab4ca33b59cf04036b3e8427dd85e6847d231a3b0e5188a8b90e
-
Filesize
899KB
MD52bb06ce0b418fd54fa36013d131be94d
SHA1a6ee5722c0d0c0dce1d3524d29aca334588c509a
SHA2562e3a210d1821ff63420c1018a7598e321b021c4a9e85661b8d6714c4c379b75b
SHA5126de4702b7a2e381de4a368e814fe6c3251d1b90d8ccc9753bd50991205cfbc7832eee158a2889f3d8f861edf0ebe9d6754af1851faafab69e1ab32e50e5e53ec