General

  • Target

    app-release-2.apk

  • Size

    1.1MB

  • MD5

    6e7a6796cb2e1c08e7a966a9086aa347

  • SHA1

    4bc7f42e5726d93055ed7f13050d2c64caf7d38a

  • SHA256

    a6f91bcc1c313b706c06161e17947aeb0ad41a85b030775807e6991f1da7eca9

  • SHA512

    fd4e58c40665ab7f9dc52f2c21311345e42483852b53a85fe03e870163294ef96a97e6d756001b5b0649d47dbae7d63b16ef97199998a4411eede36e6196dec2

  • SSDEEP

    24576:ZwHwzbsbF50VN+Oa4YxexUy4fVmLzL8PXSgO//ojAfag/UzGf:yH8bsbF5POaJwxCmLcPXSgM/Ffag/Xf

Score
10/10

Malware Config

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Hook family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • app-release-2.apk
    .apk android

    com.xazuputuboci.jusaya

    com.xazuputuboci.jusaya.diwuzecido


Android Permissions

app-release-2.apk

Permissions

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CALL_LOG

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_CLIPS

android.permission.READ_CLIPS

android.permission.WRITE_CLIPS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON