General
-
Target
Android_Guncelleme.apk
-
Size
4.5MB
-
Sample
210805-ahshhcnjts
-
MD5
d8c06445e9d07ce80c8a1b135b2f7cbf
-
SHA1
8aea297967bb110cc33db3c1d2cfd00091d68a7f
-
SHA256
2d1370802093457d7bb7b151278ff6fcd2e8944e56d87ffc483422bef2f6d8e2
-
SHA512
4401d54c2276593e8e0335bbc455f48396c3b923a66e77b785e3ad17caa8a80a73b26f4667710b7d550f27603d92a1cf28fb74b851e36327f5a873924c84a77b
Static task
static1
Behavioral task
behavioral1
Sample
Android_Guncelleme.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Android_Guncelleme.apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Android_Guncelleme.apk
Resource
android-x64
Malware Config
Extracted
cerberus
http://107.172.197.121/
Targets
-
-
Target
Android_Guncelleme.apk
-
Size
4.5MB
-
MD5
d8c06445e9d07ce80c8a1b135b2f7cbf
-
SHA1
8aea297967bb110cc33db3c1d2cfd00091d68a7f
-
SHA256
2d1370802093457d7bb7b151278ff6fcd2e8944e56d87ffc483422bef2f6d8e2
-
SHA512
4401d54c2276593e8e0335bbc455f48396c3b923a66e77b785e3ad17caa8a80a73b26f4667710b7d550f27603d92a1cf28fb74b851e36327f5a873924c84a77b
-
suricata: ET MALWARE Likely Zbot Generic Request to gate.php Dotted-Quad
suricata: ET MALWARE Likely Zbot Generic Request to gate.php Dotted-Quad
-
suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer
suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer
-
Checks Android system properties for emulator presence.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Requests enabling of the accessibility settings.
-