Analysis
-
max time kernel
74s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
04/02/2024, 21:26
General
-
Target
9032341b8b2621a059d3e3373e9d2b2d.apk
-
Size
3.1MB
-
MD5
9032341b8b2621a059d3e3373e9d2b2d
-
SHA1
306f35e92f6779e6d264adf9d8dd70d920a59684
-
SHA256
82e9ac0fa8d6699ac3bf8fd75dfef57b81fc874d7b5992eda93fcb8298104fee
-
SHA512
0979dc9de65e30bc71345ead03b46c7281f492239282187a642ff7f76a90ab98bfd817f47d4af8697e28ec3798b5aff269bcc00b36329ecc9c507d56e9035fc1
-
SSDEEP
49152:mTI2AZTCK9QlHQnOzYOu7Dew+uSm/+45wVy1jvcifUR4mbZNJezOgK56RSUmA1BG:7ZTCWQKOuKw3TLc54G7B56Eeh/Cb
Malware Config
Extracted
cerberus
http://haniburadakimlervar.xyz
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes
-
mistake.nut.panda1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
717KB
MD523b7bfcce68fb448f00139e9420f7b68
SHA10fbbae6877debbb3360c1f188b5f09f4ee6aaed7
SHA256ab6f6e7b0bf13b99d7fb7bf989beecb7a06c94cd043072b8419bbf591f73ca08
SHA5128e3f8fa31e9d864195f2175ee7603685ceecfa967c70355e9b62a14526e29b6e0adf477b5515a01b455b9c7627bb95bc992adf79e04f20dce3123724b4321f11
-
Filesize
717KB
MD57a68d176f6232fd97f8132acbff70b75
SHA1b6ffd2ccd6eb5d0be66b0923b1ccb8cc6602f563
SHA256149a13d288c303832d4c2a441a65450d33e419d0b61f31161fb920e8dce89adf
SHA512fc490c33ed21f474dabae711725db15d30f73be192fb6391be7b217838b21e15c0c088c3288792d63de4dc03b1f5835a233419862ff80bf76a13204a0ec1a634
-
Filesize
264B
MD533718d8f31f7a5d271c23d238a6c642f
SHA1c08d637fdf7744e62903318eee0805bf36e7c75f
SHA2561faca88126da518031fd522250c1f648bf8f98b50d8bbc2671eada81a06bd469
SHA51291dad16dc64591adb22e1efbeed403b29c0b91739fed79c208b8b216552b4a9805c9e97fc1b4bf45e2cd242ade7024766a6aecc0fe0e9579ff555d8804fd4558