Analysis
-
max time kernel
5s -
max time network
140s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
03-02-2024 23:50
Behavioral task
behavioral1
Sample
861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b.apk
-
Size
2.0MB
-
MD5
7913e9cd5a581f61748f528242595843
-
SHA1
6b46d917515c50d5d658bc7f73dd408a7c77eec7
-
SHA256
861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b
-
SHA512
379617b6e340052a4148e27ea4ac606e105e44179b7d367e922463b853e8c86217de53c208295e3ea4c7f5eca4eee200094de9edab1d8cc5d1703bf4e16d7af2
-
SSDEEP
49152:8dLFSkaUlfhR7hQsgeHqGQfRIycGDIvdrGe:8dLFVhTqGQfiRGDab
Malware Config
Signatures
-
Ermac
An Android banking trojan first seen in July 2021.
-
Ermac2 payload 2 IoCs
Processes:
resource yara_rule /data/user/0/com.lapagopomipavu.zuke/app_apkprotector_dex/classes-v1.bin family_ermac2 /data/user/0/com.lapagopomipavu.zuke/app_apkprotector_dex/classes-v1.bin family_ermac2 -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.lapagopomipavu.zukeioc pid process /data/user/0/com.lapagopomipavu.zuke/app_apkprotector_dex/classes-v1.bin 4516 com.lapagopomipavu.zuke /data/user/0/com.lapagopomipavu.zuke/app_apkprotector_dex/classes-v1.bin 4516 com.lapagopomipavu.zuke
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
163KB
MD5d70c16d7fe242aa1348c0c878954a628
SHA1e724b1603994fe42e2152e71c7cfcd3b6dd7d4bb
SHA256d9de8f70c30fdea92bb3790685e093f74b68dc232af9332b5bfb0b7d30577a77
SHA512dfbfeaced2ce27478ca6ca9ac48d58492b888c774bd6905a827832f783793213149c775c970892d9fb68d30bab47e57f7df187a2b63178d83740d65c442543fd
-
Filesize
1.7MB
MD5d75cf9b3238dd299ca9c2e41bb286b0e
SHA1597f5b25648eff50dbb72962a592b4be98c60e16
SHA25681ee1aaf066b158109b5208dfa554683c1a9681331b82c9e22f5023bb993552d
SHA51265062731b58d675d890c9bf4265a1dec5959a8eba0691f373e330262b51d8593a2738a6abfcc54022dc65952aa49064c26e36065067b3daac50446f8812b4fee