General

  • Target

    f556fde64e284290d98ed7eb41a3df59bb49678f064e6fc37ab8a939e54a33a7.bin

  • Size

    1.1MB

  • MD5

    935727fed9c86606fe63b05636b8f248

  • SHA1

    620e899a3897cd082fb663b415b20d1c2b276916

  • SHA256

    f556fde64e284290d98ed7eb41a3df59bb49678f064e6fc37ab8a939e54a33a7

  • SHA512

    36cd509ff85979f29273e98882c31646e63a208058c73d259dc17bc1721a966e7616398d1f7ca1ecd1adaec744c45ac1829c6ad94543e3e413797d3815940590

  • SSDEEP

    24576:+b5xoLthBy6XdJk59oPGIFV9qruoVpOf5ojyFFg//rPG:QqrK9YGIFV8rg5XFFg/zG

Score
10/10

Malware Config

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Hook family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • f556fde64e284290d98ed7eb41a3df59bb49678f064e6fc37ab8a939e54a33a7.bin
    .apk android

    com.tencent.mm

    com.tencent.mm.toza


Android Permissions

f556fde64e284290d98ed7eb41a3df59bb49678f064e6fc37ab8a939e54a33a7.bin

Permissions

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CALL_LOG

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_CLIPS

android.permission.READ_CLIPS

android.permission.WRITE_CLIPS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON