Resubmissions

13-10-2021 14:35

211013-ryh1rsebeq 10

13-10-2021 14:29

211013-rtknssedd4 7

General

  • Target

    Aleyna_Tilki_Ifsa.apk

  • Size

    2.7MB

  • Sample

    211013-ryh1rsebeq

  • MD5

    ebc1e608080227a13f173612ae3136e1

  • SHA1

    18770445ea731c509beb7322a98c0477f7b8d87c

  • SHA256

    00ec32ae4b2f32c99a8053fb0b7a5dacdfdad2fa1981f058919cc484b4a5924c

  • SHA512

    0a2b51f02b2916598d0c8d6b4d33b24d8f2adbb34d1ba81eaaadd1420acc68c8e6e73e875ed337a14b57192798395617fb18f2691fa6744865d96834ef0b618f

Malware Config

Extracted

Family

cerberus

C2

http://161.97.68.93

Targets

    • Target

      Aleyna_Tilki_Ifsa.apk

    • Size

      2.7MB

    • MD5

      ebc1e608080227a13f173612ae3136e1

    • SHA1

      18770445ea731c509beb7322a98c0477f7b8d87c

    • SHA256

      00ec32ae4b2f32c99a8053fb0b7a5dacdfdad2fa1981f058919cc484b4a5924c

    • SHA512

      0a2b51f02b2916598d0c8d6b4d33b24d8f2adbb34d1ba81eaaadd1420acc68c8e6e73e875ed337a14b57192798395617fb18f2691fa6744865d96834ef0b618f

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Matrix

Tasks