Analysis

  • max time kernel
    2009212s
  • max time network
    87s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    14/11/2022, 20:07

General

  • Target
    file.apk
  • Size 1.3MB
  • Sample221114-yvyelsdc99
  • SHA256 d382de26de0a132de3e72dfd3ee65885405be30e1fa8cc2c8de586494c05d436
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • cerberus

C2
  • https://systembuilder.com.tr

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.lmdnknqng.wlgefkhfw
    1⤵
    • Loads dropped Dex/Jar
    PID:4758

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Cookies
        • Size 64KB
        • SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 d9a9bcafebe3cc1ffe481984e397a98c6ac810c89170ed9c255ca72475dc911e
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 f19cad592a1a83571989777c29a86c2da11de82931eef924bec21802ee19112e
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 5ad2cc57c51a86f3a557fafcc98c184f9703cdd983b8d45382ed6d06ebbebfce
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/metrics_guid
        • Size 36B
        • SHA256 a62e3e661c9d911f9c1c2bd32a12e7005c4f7bc1940326de77fa0f4705777059
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 e943190a796c0259318137b455077c87622dc31f4083ffb20ed6504e2ec75d5d
        • MD5 SHA1 SHA512

        1b43d19d21d49cd7_0

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/1b43d19d21d49cd7_0
        • Size 10.0MB
        • SHA256 dec5ff37953c51a7c0e8a65f10788ad356a14cdd7e54b1db01f786f9982b5d1d
        • MD5 SHA1 SHA512 SSDEEP

        96f0064b2f68f118_0

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/96f0064b2f68f118_0
        • Size 11KB
        • SHA256 0e44e795433d07e06f7035f07e7994ec5a5c331240fe8dc4b60ae2e98f88c108
        • MD5 SHA1 SHA512 SSDEEP

        9d4c559e17a87186_0

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/9d4c559e17a87186_0
        • Size 394B
        • SHA256 ff70b33470f52bbb0ba8b4e6aee0bf9c2456afaef9b8ec5bb4c20b98dbbd784f
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 fd235935ccd0ff5544512131e9a4c0ab9222f147027d73c529ef898a02054156
        • MD5 SHA1 SHA512

        f7d03f364b9296f3_0

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/f7d03f364b9296f3_0
        • Size 58KB
        • SHA256 410b27977f322f79ba25f9040f105ba17f589e15331029fa4af633b905175627
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 96B
        • SHA256 a19ce8e10737a25a248d540f99c59e0689d78a1a63078e184abc9a959499a35d
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 192B
        • SHA256 d69559100815e536d716f0b62af13c882ed86e8d5e3533befc0880a6e2a7c520
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512

        multidex.version.xml

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/multidex.version.xml
        • Size 307B
        • SHA256 150bd5fac7268e6dd6c038b4a97a28b13ae498442682106689bbf265220337f9
        • MD5 SHA1 SHA512

        settings.xml

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/settings.xml
        • Size 116B
        • SHA256 44b7e05984b2ff4a389f942dd8e2c6c948abb1edb92ad88d124472fb9ff974c1
        • MD5 SHA1 SHA512

        settings.xml

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/settings.xml
        • Size 163B
        • SHA256 5dcaced0b68e0ccc444f98aa2e1eb657c177f808be3d65352b1381eb4c778e96
        • MD5 SHA1 SHA512

        base.apk.f8u8h881.U8o

        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/uyefjuao8g/ifgayakgd7yij8I/base.apk.f8u8h881.U8o
        • Size 197KB
        • SHA256 2a78d8602b8b27d6c40ebc9ed814ef3ea10a734914176243171f40aff79439eb
        • MD5 SHA1 SHA512 SSDEEP