Extracted

• • Target

    Chromeapk.apk

  • Size

    944KB

  • MD5

    a7b751b410822403adf979e12e011815

  • SHA1

    927e3fe33a7105ffbdd9fa2fba6d260aaae71506

  • SHA256

    e35aaf008196e4d7872b5159772c8a5645f61423a5cb073471fd08e53007766b

  • SHA512

    7bdeb598c701a7c0ecd608b34c7782d8bfdb2d85e290a838866fc412e0c22c4bf0de1daebc657de7b9c259777a0eefabc27c4016ebd0b111791ac04435df7bc0

  • SSDEEP

    24576:9iAKWox06kfot/buzE00bl/uRWfqFOVcomxg/YSq:UAvox06kfA/b8l0bl/uRGqvomxg/S

  Score

  10^/10

  ermacbankerevasioninfostealerransomwarestealthtrojan

  • Ermac

    An Android banking trojan first seen in July 2021.

    bankertrojaninfostealerermac

  • Makes use of the framework's Accessibility service.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Acquires the wake lock.

  • Queries the unique device ID (IMEI, MEID, IMSI).

  • Reads information about phone network operator.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Removes a system notification.

    evasion

  • Uses Crypto APIs (Might try to encrypt user data).

    ransomware
  behavioral1behavioral2behavioral3