Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    sample.apk

  • Size

    918KB

  • MD5

    7134879be9b4e2fd6b1de8b734fe8d67

  • SHA1

    4a8f63271ed5aed3b813c0641b7f8a314fe771d0

  • SHA256

    d74ba0cb6b7c060199a7e2e7d3925606eca6f2d902bf516feea123fd2b43eadc

  • SHA512

    cd801eaca891bb65eb6e2141765725ef8d86886baa8a5e1fbd3e62b189ec7536a5285886d3c2a9f2ada433daf3f34e123e49abcbcfb6f17ef2748cca359419d0

  • SSDEEP

    24576:kWR0zj34qS4IJUGJ9O5q4WiqeVIIVamYg/qvC:kWR0zj34b7eWpBmYg/t

Score
10/10

Malware Config

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • sample.apk
    .apk android

    com.gidanituguriropo.vahete

    com.gidanituguriropo.vahete.hevuhi


Android Permissions

sample.apk

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON

android.permission.FOREGROUND_SERVICE

android.permission.GET_CLIPS

android.permission.WRITE_CLIPS