ermac | 2fbf482a56e3524d04af346784ba01609c446ca74acb65c855ffc47bfb3305db[.]bin

Reason

could not process APK: unexpected chunk type

General

Target

2fbf482a56e3524d04af346784ba01609c446ca74acb65c855ffc47bfb3305db.bin
Size

2.5MB
MD5

78959318b66be0323d3c120e651c2ae9
SHA1

a4e06464545c5f42f0ffc29c8dd3834a42d0b7f8
SHA256

2fbf482a56e3524d04af346784ba01609c446ca74acb65c855ffc47bfb3305db
SHA512

769d2e0d4b9ed19b036680cfb5718df99aac10361e0d1828aed633205e292bcf0b7f7eb87d7d49c1a3969ac9bc94aa2d037cd0379c688f57505597d4246d0bb8
SSDEEP

49152:jrkvxwknjS3NloZmqQ4p8BvXuC8YjvXPcLJE1ExIt/Zx38xJDD6mVFrhxg/K:fExwkjS7JqBqB1pzXPcLC1jtw9D6mTr1

Score

10^/10

ermac

Ermac2 payload 1 IoCs

resource	yara_rule
sample	family_ermac2

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

2fbf482a56e3524d04af346784ba01609c446ca74acb65c855ffc47bfb3305db.bin
.apk android arch:arm64