Resubmissions

12-10-2021 18:36

211012-w8wf3achem 10

12-10-2021 18:34

211012-w73tradbb5 7

General

  • Target

    Android Guncelleme.apk

  • Size

    2.6MB

  • Sample

    211012-w8wf3achem

  • MD5

    5fa2343e1720478c8be46383bb241d6e

  • SHA1

    717ab7f7f16ec940ceb15419847476178192dfe0

  • SHA256

    4b75ca3210c17313731434a7665810594cd5493ff2836ffc566a249c477c714b

  • SHA512

    a9abc879a4fbdbf049b2a452cb8adb2198c4dc624b664a6b7ba797f1c7a580688157a932123bc4f90a06c73534032e302a25b402cd0e603f070d0ad3e18ee826

Malware Config

Extracted

Family

cerberus

C2

http://194.163.187.220

Targets

    • Target

      Android Guncelleme.apk

    • Size

      2.6MB

    • MD5

      5fa2343e1720478c8be46383bb241d6e

    • SHA1

      717ab7f7f16ec940ceb15419847476178192dfe0

    • SHA256

      4b75ca3210c17313731434a7665810594cd5493ff2836ffc566a249c477c714b

    • SHA512

      a9abc879a4fbdbf049b2a452cb8adb2198c4dc624b664a6b7ba797f1c7a580688157a932123bc4f90a06c73534032e302a25b402cd0e603f070d0ad3e18ee826

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Matrix

Tasks