Analysis
-
max time kernel
2277585s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20231023.1-en -
resource tags
-
submitted
31-10-2023 22:00
General
-
Target
4bc5c2a68c50c8c901043228e9f894c5505decf283b4f4f3f6afb68c8ad260cd.apk
-
Size
2.6MB
-
MD5
8b76ab0c85478eafe3b75af4c7a925b7
-
SHA1
18e8a50a7578797f2ed879ab392663ce67280e0e
-
SHA256
4bc5c2a68c50c8c901043228e9f894c5505decf283b4f4f3f6afb68c8ad260cd
-
SHA512
f0c2b2f2d060845b4db0629a6d6e06cd291e91082c55258ab487c7773565e3b019927339f62b7aaf246bb41cf3009fd808d2bc8e2fa031f140dd7abcbd24bbd4
-
SSDEEP
49152:mF+l6owv4Jbplifg8P3Xgk+TygLjCFHnrNOlB4yp/uG7/CK:S+kL4JbplS3XATyCYnrMlBP/RzB
Malware Config
Signatures
-
Ermac
An Android banking trojan first seen in July 2021.
-
Ermac2 payload 1 IoCs
-
Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.bulosinehipibe.zusu1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
675KB
MD5a58e4ed5192672222fb3254445186ca7
SHA1839285dfde1bb6de7c48047bed79637f4772c6e5
SHA2561fee256809f1ab1be46910668b83e1a2d15d7526d0fe3648ce395d0505ac923a
SHA51258942bf96cc16a978bfd5d1b776f89d5c5e76d476df091394d889657f5ecc9a1d187279a3749017c0759f86c16414ec0d939ea39ff45504b53416ef266b8b88b
-
Filesize
675KB
MD58d17f68b305036465f27cae5b5585bfc
SHA1eff0501ca441e60b5b03e72fdbca44a591f6573f
SHA2563cd9b04b986c3cc64f50b51cbf5b006f5664938176c444d828db7150892ac8e0
SHA5122b29a38c58121ec81e4e6d2b606005f7a16801514d91ea23160babc41824882bd381131c2bfd1049dca397c2492c52d628c8ae279aa3cb4efda63cce03f133e0
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD544c1c9b9d1afcbc7249761600e261a9d
SHA16d576e736a20f0d8d4002239d193db441fc0a383
SHA256f875867c5ad5a35d33e6ec55259b646056c2f41313797edbe41d3c89017c7469
SHA512162bcb0ce71567375e78e091917a782e2633c80a5538a7aeca5458fde6ed474f3e3243d55b7764ea2eb8bf170f33e8016c62094e2852dfa3aacb3851111cdd86
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD57ff80771944657bc4537302c5bf2bbe2
SHA11e46d3a6507f4d9b57264043ad5348b5e34cb846
SHA2567b3715cf8af9084c359d5ce28ac107c367dbc0c26b13222b3d6e31f0e045fe98
SHA51256888d559dcdd8c1955cb9beba386df29fc9e71b1c572c81dbbbd3496e2502293ae8b232e70eadaaa77a6aa41598b4d1d193c3a3d06e308cf8c2ece0e4c23add
-
Filesize
108KB
MD5cdade9e25af13b3e8a8e3624b8fe89cd
SHA1c418af48575fc08b47a1574c6d897d1f2fcccb68
SHA256f03641a0050e35ade8b0e282fc4dcfce5fe200600f9b517212b179980026361e
SHA512f32566c7a9d491d46dc0fca5430b72ff0424b3f3adde488805718ccc0ce713d92c71af2714793fa5f5bd79fe8bc7bacef4f3a3155760d0746d92180f60b1a0a1
-
Filesize
1.5MB
MD510ff6ba09437aaf043f3001eaa5e11ee
SHA10a67debe9d2053ca265b8ca84713e15f39c73638
SHA2569c79a22ecf75ee430c297f981bada888f825eb070339221c7febaa4ef197e2c8
SHA512e28e385ed87c70c50c87f4377409b1e0546cdb29f16c350da3fc418e2c55739813d9c0421c6b053c7b3da54b76d1da5d5afe73495978e0379b48038468d45477