Analysis

  • max time kernel
    197481s
  • max time network
    133s
  • platform
    android_x86_64
  • resource
    android-x86_64
  • submitted
    07-03-2021 08:18

General

  • Target

    ChromeUpdate6.3.4.apk

  • Size

    2.7MB

  • MD5

    6fa1f3e911a13daa76290b7d70d88311

  • SHA1

    428a4aaed4969882d8ca852edb6613ca6ad3001b

  • SHA256

    53af082168268e74d65174048dab031269cf14ab383bf8e135b4b98e8c8fc001

  • SHA512

    6f23c35cc81c0a13633f457014473511168b834639ef3f7f96c7941b949372a197fdaf7abb060d2b0d35178d49a5b88326376e90c763115cefe86ae793c56707

Malware Config

Extracted

Family

cerberus

C2

http://santrader.ga

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

  • Removes its main activity from the application launcher 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 25 IoCs
  • 64 IoCs

Processes

  • appear.dove.wild
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3611

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads