General

  • Target

    app-release-3.apk

  • Size

    1.2MB

  • MD5

    f9ee8fa0490ab2dda36faa3aaf6116e2

  • SHA1

    f486a64a537eef3ec34675b3146c4077acaab3c0

  • SHA256

    47d88b0e9b4e0a1b15c7c5be2365dfe0fd748012d8344297752a34828b069fc8

  • SHA512

    9f5ab8d96e31857297a5dd8648fd684d37c15561140539e2bfdc1d64e496a0bb058162025f489d6bc64555691c86b274fd7346dadf1b9f8d6924fff897670b7a

  • SSDEEP

    24576:1CzRr7VllzI4fhN+5ObGn81yJ74yjskUVTImEUaojytCXxg/ULFO:1KBPlz7JN+5981bkUZNaXOxg/oO

Score
10/10

Malware Config

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Hook family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • app-release-3.apk
    .apk android

    com.copayilufutaxe.noluxono

    com.copayilufutaxe.noluxono.pana


Android Permissions

app-release-3.apk

Permissions

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CALL_LOG

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_CLIPS

android.permission.READ_CLIPS

android.permission.WRITE_CLIPS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON