Analysis
-
max time kernel
2907111s -
max time network
159s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
25-12-2023 07:07
General
-
Target
0dafa2f9e2434c39fe23f4de9003d9fb.apk
-
Size
3.8MB
-
MD5
0dafa2f9e2434c39fe23f4de9003d9fb
-
SHA1
a04b8799afa41dc13616488521c6117fa950152c
-
SHA256
15f9db03d333cd81db87367c854c96555eb605d16cc21ee607a1c16b279f9e34
-
SHA512
b9c5dadd39007b34df7f4c99ae7636106058555f0b7da105befa45852d616ead25ef4d5cecebdcef408f3d454ee97cc72c71cfae9604eeb791511cb62210d7e7
-
SSDEEP
98304:2MZAwxmwQIKjIrNFNmUCHyX8p52l7D56LrWOUaj:2MZAumnbqN/foyLl2l
Malware Config
Extracted
cerberus
http://144.91.97.46
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes
-
sure.tiger.onion1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
725KB
MD59f4acdd706a6b799719d2359ee33fc1e
SHA156cbc135681ce38e24d1cd1b43f69153abf971a8
SHA25685d7559458ae86dbc95dafa547c102ca7431da5992a847af343111bc2ea6bc4a
SHA51205bb3cd2ae47711ef3577de3beea7aa7b56eae87635d681c43460eee2b08de9186d8efeee1e9dabea931f6981f729c624ebe2423883a7bf2f5c09a3b6d34a2e1
-
Filesize
725KB
MD572f4fa9532118cd6c1475bd5ccdd148c
SHA17149e01261417790fcac7a7c8e496df917534b29
SHA25646d2139142f5d6c673575102b2876716b8479885d351c30d19d6e6d638d416d9
SHA5125011a11e78de4f7877ec48b54febb274fd1fe06b85212cb70b39b64cb894914f70f339696faca927bb7691020a263dcb633f4c625920dcade8a8dbf91a1714a9
-
Filesize
267B
MD5c7bb9a30c8a90d2a93aa81b893e70dab
SHA1b3430ef4e856bf1747ea0703fc79fc0ec4793710
SHA25695711c71d1d2ce28261f7c8f6e2bc14bd40e0c142e1dc925e6fc3a0dbad5658d
SHA51288b0f230a845e2862eee147e518294df5304d8d4d84965a361e6ffc166a3c02c8b7a3ea0844bf9f15b531dbf1333af21c4ffa8d82ebe660d6e814aec49d5fefd