General

  • Target

    417a2bc9975c4c184402c6872c9978ab8a6c3c984e91bb6cbc042a0b2f0907f2.bin

  • Size

    2.8MB

  • MD5

    26d523c39669cc4e662d0a13e4f470cb

  • SHA1

    4f1d247b19ee92cf177ff3a348b56dd74890d4ee

  • SHA256

    417a2bc9975c4c184402c6872c9978ab8a6c3c984e91bb6cbc042a0b2f0907f2

  • SHA512

    1be76b024c796d11c6302af03aa9d07f0ca896ffb2deb4d518240f20c17ea828774c541573c6e3ae56ab86430e5ea0d5590a5f774365ed1b6b27068faa95f3aa

  • SSDEEP

    49152:uOEfL+03bbYxvXQorgrONkfFZmklGW+w8RD2YzCLO5iQuXv3g//J:V+L+03bbYxvQorgrONkfzmklG7RBmQum

Score
10/10

Malware Config

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Hook family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • 417a2bc9975c4c184402c6872c9978ab8a6c3c984e91bb6cbc042a0b2f0907f2.bin
    .apk android

    com.tencent.mm

    com.tencent.mm.Main2


Android Permissions

417a2bc9975c4c184402c6872c9978ab8a6c3c984e91bb6cbc042a0b2f0907f2.bin

Permissions

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CALL_LOG

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_CLIPS

android.permission.READ_CLIPS

android.permission.WRITE_CLIPS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON