Overview

overview

10

Static

static

7

9FFDA0C1E8...B0.apk

android_x86

10

9FFDA0C1E8...B0.apk

android_x64

10

9FFDA0C1E8...B0.apk

android_x64

Analysis

  • max time kernel
    596976s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 08:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    9FFDA0C1E8E9E9C63C5219941F3F72F04EF8027B2ED8443498100DF27E00B8B0.apk
  • Size 1.8MB
  • Sample220602-ke5bbsaahm
  • SHA256 9ffda0c1e8e9e9c63c5219941f3f72f04ef8027b2ed8443498100df27e00b8b0
  • MD5 SHA1 SHA512
Score
10/10
cerberusbankerevasioninfostealerrattrojan

Malware Config

Extracted

Family

  • cerberus

C2

  • http://teknoasaglik.online

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
    evasion

Processes

  • njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:6321

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        CLgH.json
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_DynamicOptDex/CLgH.json
        • Size 791KB
        • SHA256 60ef60157445a623636d55e81347a2f0fc322a1c8d98a0421f269330e6401734
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        CLgH.json
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_DynamicOptDex/CLgH.json
        • Size 791KB
        • SHA256 058b5927de385c9daa9ef67731dd912e9ae4265b43ca676872e18db9aed3f228
        • MD5 SHA1 SHA512 SSDEEP
        Download

        CLgH.json
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_DynamicOptDex/CLgH.json
        • Size 791KB
        • SHA256 058b5927de385c9daa9ef67731dd912e9ae4265b43ca676872e18db9aed3f228
        • MD5 SHA1 SHA512 SSDEEP
        Download

        index
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 8150a2117763f6ba83230725dcebcc7cf5caf18cd08da748f446013840f74143
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 0351b687b517f08b160939209a6e6cefaa10aa47d8e56c02cdca3da5f2c992d7
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/app_webview/metrics_guid
        • Size 36B
        • SHA256 c5c8bf92fdef2b05717e6ee908d733d3fbf5cd9bb1444f977bed9dd9bf568e83
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 81988d634a77264f7035e74d6ee2b631b7c2bb27ff544942defa4236ac41a444
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 a73bbeccd6dc786702fe23a48c7a0bfa412f9aac4db2951803f522fe92f5259b
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/njrubljhdew.zkqncfm.cdjqppywpayaaciuwswzu/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512
        Submit Download