Analysis
-
max time kernel
2412247s -
platform
android_x86 -
resource
android-x86-arm -
submitted
17-10-2021 19:40
Static task
static1
Behavioral task
behavioral1
Sample
Androidupdate_2.apk
Resource
android-x86-arm
0 signatures
0 seconds
General
-
Target
Androidupdate_2.apk
-
Size
2.8MB
-
MD5
4ed6bfe741982803744054d497744180
-
SHA1
9e8feaac343f2e43b1eb0cd0437ca59869164ebf
-
SHA256
33f9c3fdb345146fc95dbe2bf2ea18d0cf7c1a64620862019c88c99f0f7726ab
-
SHA512
f446ba7dea2f273fb264c7790d4b2dc3313ffeaf339821a473206cbf70a529bafafd8a6296feb811245bfacf269517cb78ed6d296e6effd01ac52911a4047ff7
Malware Config
Extracted
Family
cerberus
C2
http://20.90.106.208/
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.arrow.cousin/app_DynamicOptDex/glXJrc.json 4855 com.arrow.cousin /data/user/0/com.arrow.cousin/app_DynamicOptDex/glXJrc.json 4881 /system/bin/dex2oat /data/user/0/com.arrow.cousin/app_DynamicOptDex/glXJrc.json 4855 com.arrow.cousin -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.arrow.cousin -
Uses reflection 1 IoCs
description pid Process Invokes method android.content.pm.PackageManager.isInstantApp 4855 com.arrow.cousin