Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    16/04/2024, 22:01

General

  • Target

    52435cd21f3d725029038fd4c24e22f819dee4ea035107bb30ee2895d9d02b29.apk

  • Size

    994KB

  • MD5

    b5ee66fe34fab727ce1541e054bbd8a5

  • SHA1

    8f4836b5604816f398eee8d42073eca89bfeb145

  • SHA256

    52435cd21f3d725029038fd4c24e22f819dee4ea035107bb30ee2895d9d02b29

  • SHA512

    9e699052d0fb9c4b1fe06e0b24d160a861da18ce4c2f754d92c005a3ad112385744d0e8ad4d2b29ad173c1b1f7265fdfdba5f26b9790abf9a47dfcdfe4f81900

  • SSDEEP

    24576:zTww2poKQAdjHLE3z48qKCfCVCwCICHCCCnCICrCXgSDUW:z8w5XYasge0V5WHWpiKgSn

Malware Config

Extracted

Family

ermac

C2

http://87.120.84.22:3434

AES_key
AES_key

Signatures

Processes

  • nusku.ermacv2.apk
    1⤵
    • Makes use of the framework's Accessibility service
    • Removes its main activity from the application launcher
    • Checks CPU information
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5007

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads