Analysis

  • max time kernel
    3608316s
  • max time network
    65s
  • platform
    android_x86_64
  • resource
    android-x86_64
  • submitted
    15-04-2021 19:45

General

  • Target

    95c671b71bee5fdaec601b89e3ef43c30a606d117c80658776d9a50516f1c414.apk

  • Size

    3.4MB

  • MD5

    0a773cbfefc68911d0e2bf3428303ad0

  • SHA1

    2a29258e26fc7b44aeef9d68fe8d52082280e800

  • SHA256

    95c671b71bee5fdaec601b89e3ef43c30a606d117c80658776d9a50516f1c414

  • SHA512

    aca5368df9d5588f608b0982d635ad58f8e93f755f4888218614cb7b6f76b119dad9645c2b869e3cc31958961fc70e61e980ee07a9805aa03b4c3606a2b5ad64

Malware Config

Extracted

Family

cerberus

C2

http://107.172.142.199/

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

  • Removes its main activity from the application launcher 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 27 IoCs

Processes

  • search.truth.weird
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3613

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads