Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2747105s -
max time network
153s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
-
submitted
24/12/2023, 02:29
General
-
Target
bc9fe51014b45c62ee7bb49bdb6b37c1116d4b9a9a8ce4f90f70376fcff4602c.apk
-
Size
3.5MB
-
MD5
6867394eea32e373ced9dc534ddcdf33
-
SHA1
98dc6dd89137b4d97338f25894074d98c9eb7adb
-
SHA256
bc9fe51014b45c62ee7bb49bdb6b37c1116d4b9a9a8ce4f90f70376fcff4602c
-
SHA512
23d6dcaebfb5ee7d6ee92aa325657a521fd6cf445eb1b3bc6714ddbb87e50410751f53d470d622d50da9e55f04d23f669f7af33e1de305d53257c2c5c4a28d30
-
SSDEEP
98304:X3lFtx240S8vmU23MYC3SNcgSM6G5q3qdDlE3FGP+X:3240S6mU2tC3SGk5uqdDlE3UGX
Malware Config
Extracted
cerberus
http://107.175.95.161/
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes
-
arrive.sell.bracket1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
713KB
MD53ee07ed3e6ac9ef7dbe4932e7e22bb4c
SHA16536430f0e415380e56ac46a0bb268d5a65c8456
SHA256dcc4ac3ad7c343c3286958eeaef10e189ebdefce96a747fd23bd39cf6d18dd67
SHA512a3b2ba5ad837d6d2408f9917ec5b5b9879c2391ef88ace69a0e3f7773531039dc2b131c9b6d09018025af061e349d23bb86b53f39487d6607878261eb92c95a0
-
Filesize
713KB
MD5482538e6e09691173d0da97458a418a7
SHA1164a443a985a5e139f9a8ee70ebe4da9e396751b
SHA25688a43ae219c2e012bb0d351945c4c536e5634faac23e2bccdf88b6cf93030b78
SHA51290c2dc1422d4407660bce4d95bc4de2d9a8c69e7cbe8d82c3b2c9e59ee30a34eed8feee329120b4592f855f2cf22f5f35e1a88f164591dff47f580e5ebe6169c
-
Filesize
254B
MD560830ca68670d82ae1e2f205ec9f6554
SHA1d7c79a674b5b38dcde5a15f0a22d9cc86655525f
SHA25629bc2ba147659c98d622849edcdf8ae199b83bed5f1c6eff62af071dac30d744
SHA51279b34c34ba719dd92db899e9c8ff3bd26252bcb8eda7aafa12f66ecc1f63f3f6b74bedaf08131096fe209c146a5bbdf5ad4be10b9d0e1dc599fcab1f8f08e2b0