Analysis
- max time kernel
1362393s - max time network
86s - platform
android_x64 - resource
android-x64-20220823-en - resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system - submitted
07/11/2022, 08:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
daeee957a71220290b16e67d7795f9c0.apk
Resource
android-x86-arm-20220823-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
daeee957a71220290b16e67d7795f9c0.apk
Resource
android-x64-20220823-en
3 signatures
150 seconds
General
- Target daeee957a71220290b16e67d7795f9c0.apk
- Size 1.9MB
- Sample221107-kbzxfaacdm
- SHA256 89f35e028e15b82fd3cf4bb1588383de792579e389596d6c0800bf2f045ed4e2
- MD5 daeee957a71220290b16e67d7795f9c0
- SHA1 1fe1c10002b20a2273a3bc91d30016f1f6b60c58
- SHA512 cbd0addff11328a237609defb1a44472be963efbcf7b6c949c31a715d7eccdac60c61df61fea83fa4083135d5b1aeb4da6a090bc6cbfccd6bcbd64e1875bc024
- SSDEEP 49152:Xmy98QoXRqVS29cDYRWpPZqw/lkaPbgQBf7IxDW+oRjut+tpukP3Rscg:XmyJV1xuPbDZIxqJUk/Rsx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
cerberus
C2
-
https://heryerdesenvarsinbebatin.xyz
Signatures
- Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.iclejsxai.tbxgobvgw/8Tyt68g9g7/yeiHHTgaye8jHgg/base.apk.pykytfg1.6jd 4774 com.iclejsxai.tbxgobvgw - Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.iclejsxai.tbxgobvgw/8Tyt68g9g7/yeiHHTgaye8jHgg/base.apk.pykytfg1.6jd
- Size 198KB
- SHA256 e99d587969b680624c4de1404ba3f92b4d975bbfcff83f968c83578471040325
- MD5 0dac8bef95267d354d9c7e4afc97e29f
- SHA1 c7e01f33c486bb00ea0497f99c595767a4f2aed4
- SHA512 b8879565738e2981c1b4ac09e321c5df2e5a6f42bfcf66d98aa661d88ef0430bcbc7303ce52cfc4bdc1b417cac6a6029db15b1177af90c4d9d5f5c911d684888
- SSDEEP 6144:+PZ6zBDyPjmMl1Ezmj3O3gQ8FQxZtZRjL3w:ULPjnHUwQ8J
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_apk/system.apk
- Size 346KB
- SHA256 77fc15b3888378699fd43b4cbc1745461d6507aaa2e203ec0dad9de51dc110f7
- MD5 0c9dee4b3bc12a05341826a6bdbc862a
- SHA1 be8929ac653984239d5bcb67a0fab564ddfeaf95
- SHA512 9ac1c9cc603a8fda3d41be183b5c10ccd946ba707422fd322476b2fe9aa5bb2dc13c32fffc2f335425aae8ac1c7f8213b502bd27564c12630f49a0b57d8a85a5
- SSDEEP 6144:cjVb0xghJbT7CtHvItSIiyQn40tSIiy63LWCykxyRtTl1iZysMmG:GVaghJbT7SKNiyQNiy63IkIRtTl1iZyD
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/Cookies
- Size 64KB
- SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
- MD5 9b23e6a88d5a95f155f205cb04b93cd0
- SHA1 b62dccbbef087a0731f226b96d15d35d8aa5e5fc
- SHA512 bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482
- SSDEEP 48:T6YR49pU06YR49pU41+PquwIOpE+xJZFb1pU0uwIOpE+xJZFb1pU:OYusYu4vNcR4NcR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/Cookies-journal
- Size 1KB
- SHA256 4dd69a0baafa4e33849aff7a6e951837117b2169114f86498f145b98ae1ef94f
- MD5 5c4efb2de3f8e086f3a3f6505d8b4f55
- SHA1 99df37074f57e26143993a5d410f5ef64cc388c8
- SHA512 50c26b3b29430dd9438af04cf8b6f78147e5477b1d6e4c53b1d6df8165fc05d59b747559fa02655199d43d0d463d153d3c1ed54583ec4591b0686b52c9fba4ea
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 de4eb7aab52ef7feb8ad7c517a4ebe5d59d75186027ef49e67225e806836113b
- MD5 b492d9239ee7a3bbd4130eb50e997bb6
- SHA1 f54498221e69c4f2fac9266e50e984dc7761ec4d
- SHA512 54542d023da530bff0471f346a684bb0f54a51ab383ac6b994c1e2425f2a9c6d5b2601ac88c9702bb2adba73e6e7c2beb06029aba9a85b1fce161bee7663827a
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/Web Data
- Size 112KB
- SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
- MD5 b663831f8cc130493476d94f2d7a5330
- SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
- SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
- SSDEEP 96:ozaBdUDN1uKdlXfnaBdUDN1uKdlXf/eWbT6QfBE/g7rLH4y/5AIpEgeWbT6QfBEJ:owQfMQfHbTTNbTTa2Tgv2Tgz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/Web Data-journal
- Size 1KB
- SHA256 6ca20eceb7ba35dfe6e74448c3f61e10754dca425c4707601608e216fcf3363c
- MD5 d28d1201a3146fd138e7e4d84d5071d7
- SHA1 fc5ece6acec553b4e5a76857a8fa814751f08027
- SHA512 d1dd86328ca3d6acdcf6e5477923b3ad50a942ffee9ab929ccfa068ec29538e98b77b2259d714f748e198d6958618fe8852b007c8b8dd0197956cfe7e1448139
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/app_webview/metrics_guid
- Size 36B
- SHA256 1055c132bc52da7cad7c0cdc044722cb57b25d8053bb417cabf34342241c98b6
- MD5 4c5f7c06d691810cc0c185b70dcffb26
- SHA1 588898fde7f8470d7156cdcd78bf955867492164
- SHA512 7fade649e6a054d0fa71cc86fcedb6719688a7eef261a55d44a86868a02e384ec5c35f82b30bfb6d2b9249edef37bb4571bd872d1e99d1fd91483b6372dccc5d
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 2f4145ef58acf611beffe850770027389c7a568eb21a37e9070204468e92aad9
- MD5 4ca03ff5c4015f5599688ee4b6ab724a
- SHA1 c43fb3e8475a13f5725f83cc1d77180fba14e728
- SHA512 345da49274fbcceba406220a11fc0d3b1a39c305e58979b4cc443f16c7a8ba6bbb9dcd51a2b6d59e3aabe1ec57b39e879c4ea88287fb151d7dead89575059257
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/949b862d42a065f1_0
- Size 11KB
- SHA256 98060f1b797b6a1a85982493a273edb079c1a11aaf18f11b5c66562c1d0743aa
- MD5 4951e9029e1f3881b6802814e9dc57e1
- SHA1 5f85edd9d3af910b58ce529826ddf4e3e8f32e2c
- SHA512 21c5307743e6eed743fe90cf10b3339d23c10bd0f5970832a569164ca55d0cba43cee98acccf5395174018eac17d80fe5995d302bda808af6a9c992197219b1c
- SSDEEP 192:/9Jp9JdJlReKpClReKp31amIXPCZaUgO2xwOTxExs7xy1amIXPCZaUgO2xwOTxEs:/9Jp9JXlR8lRnEXqZaU9INJwEXqZaU9U
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/9d4c559e17a87186_0
- Size 11KB
- SHA256 d837624eba3838c30473d81f8953b3f3ba1eeb28a5b99781047e142df5bceca6
- MD5 f1cde9bae9b75f9165919eacce5d85ea
- SHA1 0e34f68a3beb661784863046651b839590a86f47
- SHA512 e6357721c9dbb241a0362c4dc92a6e97bd4e5e64661931b312f7df436a45be152d3e6318f7e3b01b43c915883d6d3f0e377d5e6b1206d623740097bc032d1895
- SSDEEP 192:Eeqdeqk4HARywrPdGHnexOu+ayEYE4HARywrPdGHnexOu+ayEYA:HjDLAwrPdaHu+JEYELAwrPdaHu+JEYA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 1193d8def2d8678e3e0849716c239e266de6f5cac658edcf034510d4c3b612f7
- MD5 81d325829016b9ed1ed355e7e2f3acd9
- SHA1 5e6db2abe3bc00b158287d4316b09cc25b59750a
- SHA512 bedf63517e25e8e96893043ca80360c44fad8204fdf9f4aef6156392f2e6e6b5dd940673b1217292138279b80f2c9d4ca6156c016c2de0b74f8436714b1ad17a
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/d1b1ac9f21bb8e08_0
- Size 500KB
- SHA256 ef240d2086c878d0f01dcf25f2b11700bd55b3c894d6df78a6587e0a072a732c
- MD5 4177494857172c4cf2e223b198d053c0
- SHA1 92e2f142941a4b33eb0ec484d4092a42c1aa4a13
- SHA512 7a19f90fd06790f489fc501ab1a6d89eeba861a3bde8fc2d528f0276126f2c22eae94f5831f162d76cc8f4781cdad25c5f3a9165daff4e117a8a2609fffb5b31
- SSDEEP 12288:rKiTF+tTF+czTzGBnBpPnG0oPnG0MBD8BD/O5:pFEFXnGBnBhbAbMBD8BD/O5
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/f7d03f364b9296f3_0
- Size 58KB
- SHA256 af3d01e634b2ab07ef930e86f1a9a3f7b94fb874fa0811e73bb93d58f72de9ac
- MD5 e74bfbd780fd85f755cba8f0b5761544
- SHA1 c9ed495ba72f1d60cdb92816f8c6f5923860741f
- SHA512 9998f7b2d733a58642f1f83e188d3c78e89f65dc972f9237e46d95181da6b58e74bb0bbbc8a93b8e79e672e8d7c862a8e5c8844997af8988a90bc3b9177ef6bd
- SSDEEP 1536:/bTrq+7TtA5mz9FFRVaS69pdrq+7TtA5mz9FFRVaS69pruWue:nrdtA4FzaS6drdtA4FzaS6yVe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/index-dir/temp-index
- Size 96B
- SHA256 d2140a44710690d725caaa8e033a8d8ae865bcdfad8e4928dd01417740da3022
- MD5 a085ba3e3efb3b44d0c2c80172c375c9
- SHA1 646dbd2e04511a1950b34cbb233e031b364c54c5
- SHA512 afc161f5928b868e76cec07987aed2b413b11d6649c4f88a414e32f9b3e723cecdd3f997b4f91fe86472d022ee3e38c0ab52551f86c909db44d4cdad863a2dc3
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/cache/org.chromium.android_webview/index-dir/temp-index
- Size 288B
- SHA256 a1a8c77c5c1b8b753378962f3f3d06530b392a175f5e816b821b6127a6b5532f
- MD5 ac9997e7c9246100dc469730bc1bed08
- SHA1 12c5e99a1acc7a0655292cac787a0430177dca28
- SHA512 7bbb72b2d5e02589c27ac71942ac5a00bfb0843adb370d3091dcd8ce2ebceaa622ff1738d0633c445a53eeeea05bbd308561ec28c754570c3a4e9c3218aaa609
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
- MD5 6ef709b8536878951e87c29a1518fc2b
- SHA1 24376c70b00152501b3d98df61fa7db435339172
- SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/shared_prefs/multidex.version.xml
- Size 307B
- SHA256 185b50df9076343649a5f4d9de2d84f00b19230322de9121dd02e56ec5297ab5
- MD5 8c409405add90145618e688b297abd0e
- SHA1 d8ce8770ae9382089991120582d643b32f7c655e
- SHA512 af10a6fdfb6cdb54edd479c855ef470fc41f72837ca047d28d14d9eacfdbba0c3f934c164e2d603b078dacda3af0bef303b67629161ff79b8b3611fe6348a5e5
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/shared_prefs/settings.xml
- Size 116B
- SHA256 44b7e05984b2ff4a389f942dd8e2c6c948abb1edb92ad88d124472fb9ff974c1
- MD5 d238bcaede8d9fc88b09c0e7fa6248f3
- SHA1 7dc3c46230aeff7499e958a777a15ba65d483933
- SHA512 ef57d436fa7452f4d7a1e737351eed1a74155b8803ab28f838ae6cf134ca6b4be3a47731d024d2ba3c89bb26bdd24b68fb323f5b7d16c36712df42ac093a1a52
- MD5 SHA1 SHA512
- Path /data/user/0/com.iclejsxai.tbxgobvgw/shared_prefs/settings.xml
- Size 163B
- SHA256 5dcaced0b68e0ccc444f98aa2e1eb657c177f808be3d65352b1381eb4c778e96
- MD5 95f6cf275d56aef2102b62828f7034c0
- SHA1 8117a0e4daf60ee6edf88e6992c764680be59890
- SHA512 6dd12b3f5091eea21604e412748d14e48f77ce03982768cfad754bd581a024b6ccb3e99ed094b4ac27493ac225c99504f6d55b215db2e9e11f1df234d86925fe
- MD5 SHA1 SHA512