Resubmissions

03/02/2024, 23:50

240203-3vjzfacff510

03/02/2024, 22:00

240203-1wnynsbad410

Analysis

  • max time kernel
    5s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    03/02/2024, 23:50

General

  • Target
    861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b.apk
  • Size 2.0MB
  • Sample240203-3vjzfacff5
  • SHA256 861035d786e4ba1ec206fcb22abf18e682b3c8481475e38fee54757fe8481c3b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Ermac

    An Android banking trojan first seen in July 2021.

  • Ermac2 payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.lapagopomipavu.zuke
    1⤵
    • Loads dropped Dex/Jar
    PID:4516

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes-v1.bin

        • Path /data/user/0/com.lapagopomipavu.zuke/app_apkprotector_dex/classes-v1.bin
        • Size 163KB
        • SHA256 d9de8f70c30fdea92bb3790685e093f74b68dc232af9332b5bfb0b7d30577a77
        • MD5 SHA1 SHA512 SSDEEP

        classes-v1.bin

        • Path /data/user/0/com.lapagopomipavu.zuke/app_apkprotector_dex/classes-v1.bin
        • Size 1.7MB
        • SHA256 81ee1aaf066b158109b5208dfa554683c1a9681331b82c9e22f5023bb993552d
        • MD5 SHA1 SHA512 SSDEEP