Overview

overview

10

Static

static

10

16ec950e7f...7d.apk

android-9-x86

8

16ec950e7f...7d.apk

android-10-x64

7

16ec950e7f...7d.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16ec950e7f8c4645f89017ffd6f94e76217e0a955068e722732f087af4a4407d.bin

  • Size

    981KB

  • Sample

    240425-1xzfssfg3z

  • MD5

    b2dfd4a7da0459826cd0f2c2ad1d7dcf

  • SHA1

    cdf4757a3e97c21695f0f3b13c796dfd113300ab

  • SHA256

    16ec950e7f8c4645f89017ffd6f94e76217e0a955068e722732f087af4a4407d

  • SHA512

    4851728a58d1ab5890a7ed3104422496936c671ee1ac68cc8eb080cc0018801df04be8ce31f7ea855850d938f117669e913b2ff103a47fe1da6e40bedcbb830c

  • SSDEEP

    12288:dmPseYqwV07kHRz9bJvxVzbCgZl4YlyoGotq8mwOAkASw4op3dS+jclYgA4qDHkX:8G0UHJPaylJsGtqbPTozS64Yg/ukgG

Score
10/10
ermacandroidevasionimpactpersistencestealthtrojan

Malware Config

Targets

    • Target

      16ec950e7f8c4645f89017ffd6f94e76217e0a955068e722732f087af4a4407d.bin

    • Size

      981KB

    • MD5

      b2dfd4a7da0459826cd0f2c2ad1d7dcf

    • SHA1

      cdf4757a3e97c21695f0f3b13c796dfd113300ab

    • SHA256

      16ec950e7f8c4645f89017ffd6f94e76217e0a955068e722732f087af4a4407d

    • SHA512

      4851728a58d1ab5890a7ed3104422496936c671ee1ac68cc8eb080cc0018801df04be8ce31f7ea855850d938f117669e913b2ff103a47fe1da6e40bedcbb830c

    • SSDEEP

      12288:dmPseYqwV07kHRz9bJvxVzbCgZl4YlyoGotq8mwOAkASw4op3dS+jclYgA4qDHkX:8G0UHJPaylJsGtqbPTozS64Yg/ukgG

    Score
    8/10
    evasionimpactstealthtrojanpersistence

    • Removes its main activity from the application launcher

      stealthtrojanevasion

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Acquires the wake lock

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks