Overview

overview

10

Static

static

7

484F686247...5B.apk

android_x86

10

484F686247...5B.apk

android_x64

10

484F686247...5B.apk

android_x64

Analysis

  • max time kernel
    596539s
  • max time network
    174s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 08:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    484F6862473B96487B7D2CB1079DF512403ED48AB25ADF6AA3738FB39ACC625B.apk
  • Size 2.3MB
  • Sample220602-kc9s2aedf2
  • SHA256 484f6862473b96487b7d2cb1079df512403ed48ab25adf6aa3738fb39acc625b
  • MD5 SHA1 SHA512
Score
10/10
cerberusbankerevasioninfostealerrattrojan

Malware Config

Extracted

Family

  • cerberus

C2

  • http://lcnpro.net

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
    evasion

Processes

  • com.ygmdflerbfvl.tbistzkei
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:6341

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        fsdcqjklz.jar
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_offline/fsdcqjklz.jar
        • Size 62KB
        • SHA256 d333fe24ab64cffce489cf149fc1127b91f3662a406ea7555b9e91fda486ab1f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        fsdcqjklz.jar
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_offline/fsdcqjklz.jar
        • Size 118KB
        • SHA256 802ff9fe8616b77cfd5ade32de49928816a35376340562bc1d90a4dcd1fcb443
        • MD5 SHA1 SHA512 SSDEEP
        Download

        index
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 1dd956839b4895a5c4ef256fdc6ace6ec6237c5428e3ad16677a8db56ec036ae
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 d226d28c58b5697cace7cc6a3c828cbf44bffc664c743bc46fd4b5ae69e1629f
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/app_webview/metrics_guid
        • Size 36B
        • SHA256 dc65809bfc4aa2277b98e23d5afe8ad7c081e6a5a0ca23a0a9a244af2064e26c
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 1cffeda32e43c641d0b353c7cd16e8df332989b44667b855f7a64b0c86609957
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 6019b5dac91e35006b50e363e0dc416d33a93b2c6d064fe4fe9a37c8198d5f53
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.ygmdflerbfvl.tbistzkei/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512
        Submit Download