Analysis
-
max time kernel
2236493s -
max time network
75s -
platform
android_x64 -
resource
android-x64 -
submitted
15-10-2021 18:52
Static task
static1
Behavioral task
behavioral1
Sample
Android build_obf (1).apk
Resource
android-x64
0 signatures
0 seconds
General
-
Target
Android build_obf (1).apk
-
Size
2.7MB
-
MD5
28e0d06562a6e0df8dad0fa04e4c33ac
-
SHA1
aa2511f7546d97e327b4a6a027f3195f62e04117
-
SHA256
aa5ea17832aa74736e26ab68b569c83b38d705289df49bb98c0aa5c9657fbe11
-
SHA512
946d78b5d85c2fd5c59e5eb406f9bcc99784305a24f416832742049bd7eabe6a3b6d327fcfac6d9d3bf5eaf73490317d1708a54ec2622643a8c9b6f2a1a4b73d
Malware Config
Extracted
Family
cerberus
C2
https://232323zonenenmamsmaspacedmmdsmd.space/
Signatures
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.define.cake/app_DynamicOptDex/cxlu.json 3709 com.define.cake /data/user/0/com.define.cake/app_DynamicOptDex/cxlu.json 3709 com.define.cake /product/app/webview/webview.apk 3709 com.define.cake /product/app/webview/webview.apk 3709 com.define.cake -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.define.cake -
Uses reflection 3 IoCs
description pid Process Invokes method android.content.Context.bindServiceAsUser 3709 com.define.cake Invokes method android.content.Context.bindServiceAsUser 3709 com.define.cake Invokes method android.content.Context.bindServiceAsUser 3709 com.define.cake