General

  • Target

    Android_Guncelleme.apk

  • Size

    2.1MB

  • Sample

    211207-1fjc9agag4

  • MD5

    29ab2e7708d6377ae2396ac0c6a08e59

  • SHA1

    53d2f64896aa90901a097eba623d3855fa3f7896

  • SHA256

    5abaa68c979f7fa1933cf02b421d99e8109494c6038fd4eb3c9f4f338edfd7af

  • SHA512

    117a0d289bc89386ee4a7b4b79502e4724718ee9fe0f0781badb8dd1dd06edb954630275c36ea13fb83dfad3d8bc4c1850d5ad0ef97db69e22e48afa3eae668e

Malware Config

Extracted

Family

cerberus

C2

http://62.171.165.146

Targets

    • Target

      Android_Guncelleme.apk

    • Size

      2.1MB

    • MD5

      29ab2e7708d6377ae2396ac0c6a08e59

    • SHA1

      53d2f64896aa90901a097eba623d3855fa3f7896

    • SHA256

      5abaa68c979f7fa1933cf02b421d99e8109494c6038fd4eb3c9f4f338edfd7af

    • SHA512

      117a0d289bc89386ee4a7b4b79502e4724718ee9fe0f0781badb8dd1dd06edb954630275c36ea13fb83dfad3d8bc4c1850d5ad0ef97db69e22e48afa3eae668e

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks