Overview

overview

10

Static

static

7

file.apk

android-10-x64

10

file.apk

android-11-x64

10

file.apk

android-9-x86

10

Analysis

  • max time kernel
    2009203s
  • max time network
    79s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    14/11/2022, 20:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    file.apk
  • Size 1.3MB
  • Sample221114-yvyelsdc99
  • SHA256 d382de26de0a132de3e72dfd3ee65885405be30e1fa8cc2c8de586494c05d436
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
cerberusbankerevasioninfostealerrattrojan

Malware Config

Extracted

Family

  • cerberus

C2

  • https://systembuilder.com.tr

Signatures

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
    evasion

Processes

  • com.lmdnknqng.wlgefkhfw
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4386

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        system.apk
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_apk/system.apk
        • Size 346KB
        • SHA256 77fc15b3888378699fd43b4cbc1745461d6507aaa2e203ec0dad9de51dc110f7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cookies
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Default/Cookies
        • Size 64KB
        • SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cookies-journal
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 ed68828c2bffd5b71956711e51867f81f2aac6930e86de801070a1cc77d074a4
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 50ae746a268b36c6a38eb72bf3479e2957b42d3967edc63ec51ad769aa6a2778
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 2eee3a413664302a5078137f875d70acb357660e7d0ec05ae468ef3b10aaa780
        • MD5 SHA1 SHA512
        Submit Download

        webview_data.lock
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/app_webview/webview_data.lock
        • Size 29B
        • SHA256 6d54cbd80fa392ce57f071f77610c19e0a13abe1d0356f98a344834686f7c6d0
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 90af007abe12463b3b50bfc1374086ef0fa98f1a9e2fa7b285875e07b9b4362d
        • MD5 SHA1 SHA512
        Submit Download

        96f0064b2f68f118_0
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/96f0064b2f68f118_0
        • Size 382B
        • SHA256 fe32bd589d90f0bbab26db632644b9ccb3877b7bc5d77958ec1987fd6dc4ebf8
        • MD5 SHA1 SHA512
        Submit Download

        9d4c559e17a87186_0
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/9d4c559e17a87186_0
        • Size 11KB
        • SHA256 a07022459ea73a8678fa4ab1aa611ac96aa3ae86935a14c88b8e6318b831ab88
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 e1f5a63a87700122003277f04c950a2cf0b8ee10f847f4d2f98688cc2205088f
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 8692de915ca78ba04ea7df61a852c011a9e3f6874f7b3b5e6c2fa7a93cf73e61
        • MD5 SHA1 SHA512
        Submit Download

        f7d03f364b9296f3_0
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/f7d03f364b9296f3_0
        • Size 352B
        • SHA256 02f75dbbbd84ca960e0ab17d8e8c50383a3f2da2f779dfa361fb1bcdae6350ba
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 5d32bb5a3e5a657cd74ca59f93c55d7d8dbac94c85b9164211f0c008d17b4772
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 9c86a16139ebaccc3c836e1c8aaa4a396324b4f2c4e7f91fcc37722f8e36f8eb
        • MD5 SHA1 SHA512
        Submit Download

        font_unique_name_table.pb
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512
        Submit Download

        multidex.version.xml
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/multidex.version.xml
        • Size 307B
        • SHA256 1949251dfe086ce84107c5667c203913995789a82a9fb573380fd829bbaed2ac
        • MD5 SHA1 SHA512
        Submit Download

        settings.xml
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/settings.xml
        • Size 116B
        • SHA256 44b7e05984b2ff4a389f942dd8e2c6c948abb1edb92ad88d124472fb9ff974c1
        • MD5 SHA1 SHA512
        Submit Download

        settings.xml
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/shared_prefs/settings.xml
        • Size 163B
        • SHA256 5dcaced0b68e0ccc444f98aa2e1eb657c177f808be3d65352b1381eb4c778e96
        • MD5 SHA1 SHA512
        Submit Download

        base.apk.f8u8h881.U8o
        • Path /data/user/0/com.lmdnknqng.wlgefkhfw/uyefjuao8g/ifgayakgd7yij8I/base.apk.f8u8h881.U8o
        • Size 197KB
        • SHA256 2a78d8602b8b27d6c40ebc9ed814ef3ea10a734914176243171f40aff79439eb
        • MD5 SHA1 SHA512 SSDEEP
        Download