Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

6e97091787...29.apk

android-9-x86

10

6e97091787...29.apk

android-10-x64

10

6e97091787...29.apk

android-11-x64

10

Analysis

  • max time kernel
    3300540s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system
  • submitted
    22/08/2022, 08:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6e97091787df05f9c69fc18529246829.apk

  • Size

    4.2MB

  • MD5

    6e97091787df05f9c69fc18529246829

  • SHA1

    8b7fd675d02ddf94a9141842252eb54993ce3f6c

  • SHA256

    fdf52cf54b38b6d2cf78fd5c0253626bc9f148db0eb7e307a28349ceab5a7be8

  • SHA512

    b90877a306774f3a41a371b03d04e8b64e8cf10fa500a3312ad1b53c2152ac1345bd3e439f7e47b75ac7a3728f71e41c77400ee50642d66c86a007a7fb37c04d

Score
10/10
ermacbankerinfostealerransomwaretrojan

Malware Config

Extracted

Family

ermac

C2

http://62.204.41.98:3434

AES_key
AES_key

Signatures

  • Ermac

    An Android banking trojan first seen in July 2021.

    bankertrojaninfostealerermac
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.doptdtvwg.yhhisqauo
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5015

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.doptdtvwg.yhhisqauo/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    2257744371a6eb04fd52d60cbaec9f71

    SHA1

    4f983e2ac454a4bcf34981cfe069a24e90ff0baa

    SHA256

    19cc415ed897abeda51ea15984d2df10eaa9fff1b578eec66751fb740b0352a9

    SHA512

    e5da0172346de5956e328902b7bc685a3e8e512f914a24681fca18ac189a99847397a1de613323b0fc1ba3ea933005e3c6ff7a93759c8f51193f90d21cd069ab

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    59bc1c55b8ac6a85a368ec82100429a8

    SHA1

    b562578d17c4fecf814c5cfc5e1ddd5c343591dc

    SHA256

    0e6ca5dc1d74ee0941ed56c18ef9dcca55d3e09b27995fb2e2e96f2b2963d7b8

    SHA512

    fbfb907cb6ecec0932bbc1adac65a017bd522663227072a6d6fe1d660f60a3ce1ec2ce8794d1db19965489f801c25a10d046f8d806d7883f2acb2697e2316e05

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/app_webview/metrics_guid
    Filesize

    36B

    MD5

    c458c62a25ab4cc9ae0b8d8f5c71c412

    SHA1

    92a21e90bf048ba4c537e10bb627961966fad241

    SHA256

    ba96bf366bcf2ba6cdb4b8f370c12427a29e9b2367ebdafab73b80dab9c264f4

    SHA512

    654c38c2ada763785f0f07557fd71ef02a7faf925ad261658b3926b8e5d32a8add668724d06130aa0ee40db15ce08457f013a374c5535d02c03ffc9f97e85df0

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/bIp8fgIg6j/b5kkygp8f58huog/base.apk.Uyfkqyg1.hhg
    Filesize

    1.3MB

    MD5

    63d5c5dcfb74dfa9586817ca5f2ae741

    SHA1

    92cba0909b54f466df279438db857dd4ce42f1c2

    SHA256

    1e2c2c1fa2ab9a0e70e495be75f718ddb995413bc3a27eb58397985213a51a18

    SHA512

    112f4379cbb2026ef1fcdd0a996fb52aaefd62cc0cc8fcf86003f56ba22bea6a8b20e34d4252821e72ed54031588c45d7bdebf3824d7291047a66a3ec7f1f484

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    ee68b9c2152d9fd4774b494d60f3cd90

    SHA1

    9445f1b9957023537d515c9418b49d67b6b4f52e

    SHA256

    8753fd89be5a3fdde6fb8bcaacbeefdb6bcf217ac6ed0ec04607d617d4da55b2

    SHA512

    d2bc70e896ec5a55f0bf54a989a850e2b4bbb20b2175256a633ce31998b89c83497525841af5a2fd2d5d2403f2611f6781271bb96fe5a78e6a49be7284cf1a24

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    2c9e61bc87c856fbe4d0fdebc3076300

    SHA1

    2f280adc8720722157ca69279985a0f1cb2ecdff

    SHA256

    2923b4ef760a822d2d850ed63e609c9de358857a0483c40cbb7df23ceb4da52b

    SHA512

    e9747531b865f520f4502b8bda3890123531a24997ed13b4e7044dbe9ed7ab290171034e50563a3464d3afac38d0ae974d5eaeb49e3e52485ea7dd4f2ecab2ef

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    Download Submit

  • /data/user/0/com.doptdtvwg.yhhisqauo/shared_prefs/multidex.version.xml
    Filesize

    307B

    MD5

    205e66c4df92a8bacd79df9923e7c5c7

    SHA1

    49b2da4e9ce57f8ecfc4de2b2d923172097054a3

    SHA256

    c1efb603c214522256ceb614cbbdc93f786044dc99c4df0019032aed154d99fa

    SHA512

    1abf3d98db673ca1ae3f163b8b123bdddbb8a33bcccc08431a8fa2778e9b85a3e16e8ba4ad65f8c208428c1978619ae28fd3411ca951bc50f6c65735add3ca55

    Download Submit