ermac | a4fdcaa0ae189a20b04b0adfc99a5c3810fb01201517569f078ec59449befa1e

Analysis

max time kernel
7s
max time network
130s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
13/10/2024, 22:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a4fdcaa0ae189a20b04b0adfc99a5c3810fb01201517569f078ec59449befa1e.apk
Size

1.8MB
MD5

22597c6ac1c89b9b31a1c135b613a645
SHA1

2192ad0149233dd8477babcf64bc643a5fca089a
SHA256

a4fdcaa0ae189a20b04b0adfc99a5c3810fb01201517569f078ec59449befa1e
SHA512

10a5bd408d886d702773aa735a2e17dfb3e398b90f47e9c84224b46b04848c5271d1be49d5b042bdf9a064a1e0187a2efad105ec5ceb48a78fabbc36a4770074
SSDEEP

49152:Zg/94Z2SrHmjLKxqobYnc1Th+tompsZKnnmTD28o2a3+glD6s:hHmyxH1Ty+ZKnncDoblD6s

Score

10^/10

ermac banker evasion infostealer trojan

Malware Config

Signatures

Ermac
An Android banking trojan first seen in July 2021.
banker trojan infostealer ermac

Ermac2 payload 1 IoCs

resource	yara_rule
behavioral2/files/fstream-1.dat	family_ermac2

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.makedubefomi.tudaki/app_apkprotect_dex/apkprotect-v1.bin	4351	com.makedubefomi.tudaki

com.makedubefomi.tudaki
1⤵
- Loads dropped Dex/Jar
PID:4351

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.makedubefomi.tudaki/app_apkprotect_dex/apkprotect-v1.bin

Filesize
1.0MB

MD5
020c2fe46313eba9352761a685aff345

SHA1
cc37a8d7021234d734fe35510cc4a939b72e3e88

SHA256
4c7df706fcf6a588090fe1478f0af193d9df12f8a2b26cedde656127bd33e5a6

SHA512
8498593deb09709b431ea06a3d52d3a2d1aa9c9173f0155d74dd536d64b7900411a026090b7d8d43baef07f26074c684277af9fcb4a62fc55bac73fcaa88a6f9

Download Submit