Analysis

  • max time kernel
    2156668s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    14-10-2021 20:41

General

  • Target

    Porno_Izle.apk

  • Size

    2.6MB

  • MD5

    1cf421285b8999a9bf72dabe19d67027

  • SHA1

    b49489c238f0126a1ac0f78ac7752f3e185787bc

  • SHA256

    102508ca812d1c70e1ce8cb1c28ff5ef4b14716341ed6813f03cf84330cb76f1

  • SHA512

    a97cadd1f961187823a255a113f90a35f62966c8765fe417e2aaf57d34ea5f89d0d5662655ed18f12a7ccd39e9951f3963b9048525650230c4bf28b9a7cde0a6

Malware Config

Extracted

Family

cerberus

C2

http://161.97.187.209

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Uses reflection 1 IoCs

Processes

  • com.near.swing
    1⤵
    • Loads dropped Dex/Jar
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Uses reflection
    PID:4979
    • com.near.swing
      2⤵
        PID:5003
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:5003

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads