Analysis
-
max time kernel
2140615s -
max time network
55s -
platform
android_x64 -
resource
android-x64 -
submitted
14-10-2021 13:44
Static task
static1
Behavioral task
behavioral1
Sample
Androidupdate.apk
Resource
android-x64
0 signatures
0 seconds
General
-
Target
Androidupdate.apk
-
Size
2.7MB
-
MD5
8e8b67786007492adb2f13cb70978ee3
-
SHA1
e12e8d2100af4ef4c333081c18777eda783b72fa
-
SHA256
1b4f0c4cb74737a13cd7c171abfb23b628b68d5a53ab95658d573f11c0a59bd6
-
SHA512
43bcea92a32858890269b14fbf554980cffd18809994b20e26fad95f6798a22923ba2d04f6a2a8a757d3667527d4a94b7a3440b6bf52e66c580c64912363ae37
Malware Config
Extracted
Family
cerberus
C2
http://20.90.106.208/
Signatures
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.exhibit.anchor/app_DynamicOptDex/FCjMq.json 3679 com.exhibit.anchor /data/user/0/com.exhibit.anchor/app_DynamicOptDex/FCjMq.json 3679 com.exhibit.anchor /product/app/webview/webview.apk 3679 com.exhibit.anchor /product/app/webview/webview.apk 3679 com.exhibit.anchor -
Uses reflection 2 IoCs
description pid Process Invokes method android.content.Context.bindServiceAsUser 3679 com.exhibit.anchor Invokes method android.content.Context.bindServiceAsUser 3679 com.exhibit.anchor