Behavioral task
behavioral1
Sample
e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6.dex
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6.dex
Resource
win10v2004-20230703-en
General
-
Target
e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6
-
Size
630KB
-
MD5
b11fdfec6ddbd2c0c092aba2c34f2561
-
SHA1
de260faae19626009c8b53d3315088933465f8ac
-
SHA256
e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6
-
SHA512
232e4ca08ede21f601b207a0fb46f53d1a6cef8aa6a577341416f2113606a7aae74854368802c26f4ddaa3c4787d92a41c425b34a2710c45d25671de389852dc
-
SSDEEP
12288:D/ZfhJd98qplMlVsIxM2psjdve3O0yqBq9iSADGNBe5Bj:D/ZLpOEe3S4ZDGNo3j
Malware Config
Extracted
cerberus
https://twelveelevensoup.at
twelveelevensoup.at:8000
-
uri
/gate.php?action=botcheck&data=
/gate.php?action=checkAP&data=
/gate.php?action=getModule&data=
/gate.php?action=getinj&data=
/gate.php?action=injcheck&data=
/gate.php?action=registration&data=
/gate.php?action=sendInjectLogs&data=
/gate.php?action=sendKeylogger&data=
/gate.php?action=sendSmsLogs&data=
/gate.php?action=timeInject&data=
Signatures
-
Cerberus family
Files
-
e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6.dex