Analysis
-
max time kernel
1656965s -
max time network
176s -
platform
android_x64 -
resource
android-x64-20220621-en -
resource tags
-
submitted
03-08-2022 08:09
General
-
Target
110.apk
-
Size
2.1MB
-
MD5
aaf8cd2c4ac88b48e79736bbe53c114a
-
SHA1
b3482f2c97fea3e03d8221eeb2f116c4a18588c1
-
SHA256
71927786fc16e90fe05e1eb032c3591d878c7cfd197d02113d7d006e2d7b171f
-
SHA512
ba62a4a1900cc0c2d618775ce9892c5df153dde032954e539f73133fbc2ed5303e112ca4b24d9cc804972b434fed1fedf4af55d70db600e19efa173fe16a47c3
Malware Config
Extracted
ermac
Signatures
-
Ermac
An Android banking trojan first seen in July 2021.
-
Ermac2 payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.ceveluriseze.xuca1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
455KB
MD5b8dc757cfb33c5eb101156d556107b41
SHA174094c723987e18ebd2c9f47eab1c1783fbdcf1a
SHA25694cc344253742f9fc6a9a4ddd14adae3347d6968504cc20809952592dceb04f7
SHA512071432c7b364b9467d6389555bb5d3a7dbdc8ef0e7af5bb7144ffb40ad64b170a4d0bd00e97e853d5a7fbcfa1ce1ccd7a4fb5e2166c30a89d654c9373dc6b857
-
Filesize
898KB
MD50dd793db94e699d4e490877d6964117d
SHA128a9aab6508489595a79033d6ae7314fccfae320
SHA2567219a96b565c66810afe1bd59353617e1a968abf30cdc3b43e431f45ca093b05
SHA5123a4047b5d8cbbf1bfccb8f2a724ac2333437932fd486489a0c92163fe74209cf43b9485796e07a3ebb28964024c185245d5af2d26576d1dcf9b93316e09644d7