Analysis
- max time kernel
2009212s - max time network
87s - platform
android_x64 - resource
android-x64-20220823-en - resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system - submitted
14/11/2022, 20:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.apk
Resource
android-x64-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.apk
Resource
android-x64-arm64-20220823-en
5 signatures
150 seconds
General
- Target file.apk
- Size 1.3MB
- Sample221114-yvyelsdc99
- SHA256 d382de26de0a132de3e72dfd3ee65885405be30e1fa8cc2c8de586494c05d436
- MD5 ad732d246de86be1024e7f1468b39399
- SHA1 359896807c2c449a0f33fe900130ad2de9198447
- SHA512 1ca4f5733135de8fc281aa377917988beafca46763709df2773e458e492be2341dfe7d2ac6cfe4e2a71456c9fb1d439d15fe0e1ad72849374c121c289019db5d
- SSDEEP 24576:aHqai2c4WVlwlkFRLWuXZvSYdQwHfw1Wb7aqTlZL3SZptdHxTZsIcerZ5ISNK:kqL2c4clk+UMqc1w8b7aSlgtdIqZ5A
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
cerberus
C2
-
https://systembuilder.com.tr
Signatures
- Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.lmdnknqng.wlgefkhfw/uyefjuao8g/ifgayakgd7yij8I/base.apk.f8u8h881.U8o 4758 com.lmdnknqng.wlgefkhfw
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Cookies
- Size 64KB
- SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
- MD5 9b23e6a88d5a95f155f205cb04b93cd0
- SHA1 b62dccbbef087a0731f226b96d15d35d8aa5e5fc
- SHA512 bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482
- SSDEEP 48:T6YR49pU06YR49pU41+PquwIOpE+xJZFb1pU0uwIOpE+xJZFb1pU:OYusYu4vNcR4NcR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Cookies-journal
- Size 1KB
- SHA256 d9a9bcafebe3cc1ffe481984e397a98c6ac810c89170ed9c255ca72475dc911e
- MD5 f02cd69a712e08333d12cbe5f5fff8c3
- SHA1 9bc2b1c26cb67b5c8c494f7bca1290bd5dfcfdb5
- SHA512 36217984d58a0fae171f6fe8be5184f4c2d7f18bce2b9dbd02953f850082c5368616eab24ea552675f4df2c9dc63bc1b7bfadea14bd3bd43baf1514fb9aedc59
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 f19cad592a1a83571989777c29a86c2da11de82931eef924bec21802ee19112e
- MD5 a34443e08d1712e3e55f6868645ec44d
- SHA1 2153c91ffb274c02917313182144a65028797a4b
- SHA512 095ea1b1a5254cbe7a7d80b227edb79758836fa403e5794aae2e6ae56f6952186bc85b53e9f5f032df329e0d4d0e76ec3d9e578bdd509431af7b582b873716a3
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Web Data
- Size 112KB
- SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
- MD5 b663831f8cc130493476d94f2d7a5330
- SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
- SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
- SSDEEP 96:ozaBdUDN1uKdlXfnaBdUDN1uKdlXf/eWbT6QfBE/g7rLH4y/5AIpEgeWbT6QfBEJ:owQfMQfHbTTNbTTa2Tgv2Tgz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Web Data-journal
- Size 1KB
- SHA256 5ad2cc57c51a86f3a557fafcc98c184f9703cdd983b8d45382ed6d06ebbebfce
- MD5 380e6ed91c7061559466d13add9206e8
- SHA1 4959aa0d18dc4e1c11433d53fd14f93f6ccd3710
- SHA512 9497c0fd50992900eda025a4ebeb7663342da376ccf6ca16a2fa64e46cd71d5485c598fbdd02b9bdc8a77310ec3215ce68b1e18fb730ba2021c25d687d99b121
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/metrics_guid
- Size 36B
- SHA256 a62e3e661c9d911f9c1c2bd32a12e7005c4f7bc1940326de77fa0f4705777059
- MD5 013b83ab383c339cd916ca2d2161c175
- SHA1 5a5bb24182b2e2bce382e08467aeca872524a211
- SHA512 f0ed188248d85e958d9049af4b469c70bace22c562eb8b76f1761f435d6903fa51bc0f323ae2934a2ec0be6194283a08a7082cb88e6c909c54c829e4ccc95909
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 e943190a796c0259318137b455077c87622dc31f4083ffb20ed6504e2ec75d5d
- MD5 30f4a248839ab6160bf261cc351ff599
- SHA1 e75bfdc5675a9546ffe00cf61f789f9e81ee5da9
- SHA512 dd9d63c3e25ea2d1b14301ba67b11d798499230f6980973ddb80d4b682a168e0915b9e4ed08cd309da55002a21e2f348350d7678a211328b0efe7ceb8679fc4a
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/1b43d19d21d49cd7_0
- Size 10.0MB
- SHA256 dec5ff37953c51a7c0e8a65f10788ad356a14cdd7e54b1db01f786f9982b5d1d
- MD5 3e3df4bcd209197fcd82d1f80481d49a
- SHA1 87f49903a9c9aaf75c0bec6315c256aea6a7fccb
- SHA512 bfe9cc65a66b3c0b684d94915164943e41593082f44516255c37ae1197a89227e5776d5c81e1d5b199b89f869550963b955eb3996453a8674731828f1769fe5f
- SSDEEP 98304:4bUHs+0+5hp3Z+fDhZeCZei95tUtRCDNOwcY7u7w3jrH6HuSpyz4hvJMM8wPCbTG:P+fDbJp9AwGwkyaMM89f/qvz0TS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/96f0064b2f68f118_0
- Size 11KB
- SHA256 0e44e795433d07e06f7035f07e7994ec5a5c331240fe8dc4b60ae2e98f88c108
- MD5 605c595672f6e1cb373371439222132c
- SHA1 845f3a96e3d585a5f8f2a60c8b8c606004e86f76
- SHA512 307cd276c49802190dc2f1801686903521fc2a3caa526707cb41010644a804ceb2df8719823cee6196b83f57ad3cf4de17673927c8b15b2633d9300cf191ae9f
- SSDEEP 192:vewQpVrKvoNOFRpVrKvoNOFdrXPCZaUgO2xwOTxExs7xnrXPCZaUgO2xwOTxExsQ:veOV6VrXqZaU9INJpXqZaU9INJU
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/9d4c559e17a87186_0
- Size 394B
- SHA256 ff70b33470f52bbb0ba8b4e6aee0bf9c2456afaef9b8ec5bb4c20b98dbbd784f
- MD5 41aa6cd1ebc091af540a440fdeb15285
- SHA1 a15cdd570781769eb4d6ac993f1776b8a318170c
- SHA512 f55d0bee68c2ca8ab76733327f0d1b9018441c1be42bfa9b9194739c89901ca4ad774371c9df2ed6ca0041753443258c05d791a98e71b1363fe4790faa4948ca
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 fd235935ccd0ff5544512131e9a4c0ab9222f147027d73c529ef898a02054156
- MD5 fa651c033efd93e17aa9857899c602de
- SHA1 5463949db892aee7a294cfb842641ce42ded6b24
- SHA512 66e00bf1772cc84061f0da83629e95a704b85ad6b7e03886824c7b0fc1cb9948527ab759ee0dedf91bdcb9d775a3869dbf8473073a19d21d3a86e86519816069
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/f7d03f364b9296f3_0
- Size 58KB
- SHA256 410b27977f322f79ba25f9040f105ba17f589e15331029fa4af633b905175627
- MD5 d5de3c1115a11e4a72126637b61fc4bc
- SHA1 e42d8dc2bc2379bac05e24e6711ef914f30b6816
- SHA512 f20013d5a18627e8b42c97bc9b0a523dbfb4623f808d11d97035867604700e40ad8168f5aad4e3cf6ec2fcbebf283ac249f6d78708b3e2c7d9d590d608bebc7b
- SSDEEP 1536:/bTrq+7TtA5mz9FFRVaS69pdrq+7TtA5mz9FFRVaS69pCz2zF:nrdtA4FzaS6drdtA4FzaS68QF
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/index-dir/temp-index
- Size 96B
- SHA256 a19ce8e10737a25a248d540f99c59e0689d78a1a63078e184abc9a959499a35d
- MD5 d42d37386b9490322d69262a9fce29b1
- SHA1 63f417242aecc20b9ccdb8a0a30bb05d8d3dd113
- SHA512 8c7ead5cc7fec055214b40ccd6654db48dce13f5dd7470d9565378e67d14f2a69a626e9f6983870049f3a79ae4e2dc4f9899c48d80f9db4dcdb2c60c76bc7397
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/org.chromium.android_webview/index-dir/temp-index
- Size 192B
- SHA256 d69559100815e536d716f0b62af13c882ed86e8d5e3533befc0880a6e2a7c520
- MD5 63c307a31cad46d51938c8916f984f15
- SHA1 e7aeed2bd7574481219687b7f4e237bb90832282
- SHA512 8e01461940774d8a50c24efc19fda462d31bf218614b6e587c39a118483cd504ceddde0f225ee076069d2e1b230585b0def7f3705116fd5563b9c3b3caf97c08
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
- MD5 6ef709b8536878951e87c29a1518fc2b
- SHA1 24376c70b00152501b3d98df61fa7db435339172
- SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/multidex.version.xml
- Size 307B
- SHA256 150bd5fac7268e6dd6c038b4a97a28b13ae498442682106689bbf265220337f9
- MD5 ca3460ee7193de9ea53efd44e5fbafdc
- SHA1 3d6372d9dec59f1fd4bc0b921b7520a71ac97c74
- SHA512 86da426acf28eee82b9d175e7185fdd931258c7ed1b4653127b4241440fb58dff81590c04d7be24a4006f714707a9cd644e7b74b3fd2e48f0a16bbc0602b0be4
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/settings.xml
- Size 116B
- SHA256 44b7e05984b2ff4a389f942dd8e2c6c948abb1edb92ad88d124472fb9ff974c1
- MD5 d238bcaede8d9fc88b09c0e7fa6248f3
- SHA1 7dc3c46230aeff7499e958a777a15ba65d483933
- SHA512 ef57d436fa7452f4d7a1e737351eed1a74155b8803ab28f838ae6cf134ca6b4be3a47731d024d2ba3c89bb26bdd24b68fb323f5b7d16c36712df42ac093a1a52
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/settings.xml
- Size 163B
- SHA256 5dcaced0b68e0ccc444f98aa2e1eb657c177f808be3d65352b1381eb4c778e96
- MD5 95f6cf275d56aef2102b62828f7034c0
- SHA1 8117a0e4daf60ee6edf88e6992c764680be59890
- SHA512 6dd12b3f5091eea21604e412748d14e48f77ce03982768cfad754bd581a024b6ccb3e99ed094b4ac27493ac225c99504f6d55b215db2e9e11f1df234d86925fe
- MD5 SHA1 SHA512
- Path /data/user/0/com.lmdnknqng.wlgefkhfw/uyefjuao8g/ifgayakgd7yij8I/base.apk.f8u8h881.U8o
- Size 197KB
- SHA256 2a78d8602b8b27d6c40ebc9ed814ef3ea10a734914176243171f40aff79439eb
- MD5 832aa78dc25a34955ec550d4907accaf
- SHA1 d623decff002db0d252a322a8999fca608885ee7
- SHA512 1a803ae1825c49f84f42badba7cb2fc9688faa35bf51a62330c04e3de50f85709bce31b785f43f57ad85b289826cedb888a20e09d1f32a02a836da47a178c102
- SSDEEP 6144:Viirfxsh3VSiHiRCABoR4eEtTGElCOosKDNLhUZMIxXi+2tAVWbaweQVLSHM5BuU:rxe3MoFIZ5x2UJU
- MD5 SHA1 SHA512 SSDEEP