General

  • Target
    ALEYNA_TILKI_IFSA_build_obf_4.apk
  • Size 2.9MB
  • Sample211016-wvddbschgr
  • SHA256 a09e1cf2e6514a984917f749815861f8dc3730164fa5ba92c50628ff948d38d9
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • cerberus

C2
  • http://161.97.68.93

Targets

    • Target
      ALEYNA_TILKI_IFSA_build_obf_4.apk
    • Size 2.9MB
    • SHA256 a09e1cf2e6514a984917f749815861f8dc3730164fa5ba92c50628ff948d38d9
    • MD5 SHA1 SHA512
    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks