Overview

overview

10

Static

static

7

57EDD6BCB7...C1.apk

android_x86

10

57EDD6BCB7...C1.apk

android_x64

10

57EDD6BCB7...C1.apk

android_x64

Analysis

  • max time kernel
    609266s
  • max time network
    191s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 11:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    57EDD6BCB7FFF5653794CD9B8CFF04C49858270E3BC54D847958E46CFE64CEC1.apk
  • Size 2.0MB
  • Sample220602-nda8msfed3
  • SHA256 57edd6bcb7fff5653794cd9b8cff04c49858270e3bc54d847958e46cfe64cec1
  • MD5 SHA1 SHA512
Score
10/10
cerberusbankerevasioninfostealerrattrojan

Malware Config

Extracted

Family

  • cerberus

C2

  • http://osmanpazarlamagkg.com

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
    evasion

Processes

  • pntsxp.mnnasexytyeym.uqjgxqy
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:6087

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        RZASPL.json
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_DynamicOptDex/RZASPL.json
        • Size 645KB
        • SHA256 41f67dcc903f5c1add860c8f08a55b6989f8fe04fe74888e7a10f41637380c28
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        RZASPL.json
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_DynamicOptDex/RZASPL.json
        • Size 645KB
        • SHA256 a9a988298ee392976cabd60147c47e3f445e9d1fd7b2f99ed84ef0276d8cccd6
        • MD5 SHA1 SHA512 SSDEEP
        Download

        RZASPL.json
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_DynamicOptDex/RZASPL.json
        • Size 645KB
        • SHA256 a9a988298ee392976cabd60147c47e3f445e9d1fd7b2f99ed84ef0276d8cccd6
        • MD5 SHA1 SHA512 SSDEEP
        Download

        index
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 d7265304af9adcf4789c9c688ecd7a31c1e7230965f8812d5b36cc7845d0c2f3
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 4e4807dc26d30ea8ad858634abe46f19e54f07cd66019ed4475df19699a6d1bc
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/app_webview/metrics_guid
        • Size 36B
        • SHA256 5bde3b04941c9284fb09f3370d2ed848024d972fcae905364993e3f7b8d0763d
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 ece18fd93603b54dd054573662e7f53c389b8f693e1c01bf93c09ca985c3cceb
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 90fc6d4ec8921f5f1d9554ba28cbafd251e80b740fb829cb2d0c07ed0d14671f
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/pntsxp.mnnasexytyeym.uqjgxqy/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512
        Submit Download