cerberus | 98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF[.]apk

General

Target
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Size 456KB
Sample240226-sycdnahe43
SHA256 98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
MD5 b72c6108be79544049a01a1e35769f9d
SHA1 8e32645c945c37fe68d42dd439a65dc6efae8e5f
SHA512 383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
SSDEEP 6144:g1ieJKhn6YB7IfTLrQKV8EHCtxS5uxWet9zXRVGVF6XT3XXT3e1/D3DhcM8nD1AP:g0ngfrdks8ddGVYjHjo8DO7n88DO7nq
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

cerberus

Malware Config

Signatures

Cerberus family
cerberus

Cerberus payload 1 IoCs

resource	yara_rule
sample	family_cerberus

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk

.apk 456KB

98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk

SHA256 98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
MD5 b72c6108be79544049a01a1e35769f9d
SHA1 8e32645c945c37fe68d42dd439a65dc6efae8e5f
SHA512 383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
SSDEEP 6144:g1ieJKhn6YB7IfTLrQKV8EHCtxS5uxWet9zXRVGVF6XT3XXT3e1/D3DhcM8nD1AP:g0ngfrdks8ddGVYjHjo8DO7n88DO7nq
MD5 SHA1 SHA512 SSDEEP

android

Cerberus payload

com.hcgetl.nysgtxkveqdzrpb

Android Permissions

98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk

Permissions

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk

com.google.android.gms.common.api.GoogleApiActivity

com.hcgetl.nysgtxkveqdzrpb.whcuedxmff

com.hcgetl.nysgtxkveqdzrpb.oizcupkvtdljkt

com.hcgetl.nysgtxkveqdzrpb.iljpdhkndwa

com.hcgetl.nysgtxkveqdzrpb.nkdobwc

com.hcgetl.nysgtxkveqdzrpb.bianbxjzzgbho

com.hcgetl.nysgtxkveqdzrpb.aoa

com.hcgetl.nysgtxkveqdzrpb.bhgcqrbho

com.hcgetl.nysgtxkveqdzrpb.rpgfknolxqqycukr

com.hcgetl.nysgtxkveqdzrpb.txjyjxgxlmcpl

com.hcgetl.nysgtxkveqdzrpb.pdcou

com.hcgetl.nysgtxkveqdzrpb.lujgjqscxjrp

com.hcgetl.nysgtxkveqdzrpb.fobyzqgedecimnh

com.hcgetl.nysgtxkveqdzrpb.oufetecqllkmqm

com.hcgetl.nysgtxkveqdzrpb.arwwvaezkfima

com.hcgetl.nysgtxkveqdzrpb.ebiuithvmco

com.hcgetl.nysgtxkveqdzrpb.robwnxwjfhlwu

com.hcgetl.nysgtxkveqdzrpb.aufgjigacli

com.hcgetl.nysgtxkveqdzrpb.bopw

com.hcgetl.nysgtxkveqdzrpb.bfgn

com.hcgetl.nysgtxkveqdzrpb.gyd

com.hcgetl.nysgtxkveqdzrpb.zkseahsxmjd

com.hcgetl.nysgtxkveqdzrpb.ljsvvlfcwnio

com.hcgetl.nysgtxkveqdzrpb.xdsqwtthjcfh

com.hcgetl.nysgtxkveqdzrpb.didcwiavafkgmfy

com.hcgetl.nysgtxkveqdzrpb.sgadjbzwmdi

Sharing

General

Malware Config

Signatures

File Explorer

98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk

com.google.android.gms.common.api.GoogleApiActivity

com.hcgetl.nysgtxkveqdzrpb.whcuedxmff

com.hcgetl.nysgtxkveqdzrpb.oizcupkvtdljkt

com.hcgetl.nysgtxkveqdzrpb.iljpdhkndwa

com.hcgetl.nysgtxkveqdzrpb.nkdobwc

com.hcgetl.nysgtxkveqdzrpb.bianbxjzzgbho

com.hcgetl.nysgtxkveqdzrpb.aoa

com.hcgetl.nysgtxkveqdzrpb.bhgcqrbho

com.hcgetl.nysgtxkveqdzrpb.rpgfknolxqqycukr

com.hcgetl.nysgtxkveqdzrpb.txjyjxgxlmcpl

com.hcgetl.nysgtxkveqdzrpb.pdcou

com.hcgetl.nysgtxkveqdzrpb.lujgjqscxjrp

com.hcgetl.nysgtxkveqdzrpb.fobyzqgedecimnh

com.hcgetl.nysgtxkveqdzrpb.oufetecqllkmqm

com.hcgetl.nysgtxkveqdzrpb.arwwvaezkfima

com.hcgetl.nysgtxkveqdzrpb.ebiuithvmco

com.hcgetl.nysgtxkveqdzrpb.robwnxwjfhlwu

com.hcgetl.nysgtxkveqdzrpb.aufgjigacli

com.hcgetl.nysgtxkveqdzrpb.bopw

com.hcgetl.nysgtxkveqdzrpb.bfgn

com.hcgetl.nysgtxkveqdzrpb.gyd

com.hcgetl.nysgtxkveqdzrpb.zkseahsxmjd

com.hcgetl.nysgtxkveqdzrpb.ljsvvlfcwnio

com.hcgetl.nysgtxkveqdzrpb.xdsqwtthjcfh

com.hcgetl.nysgtxkveqdzrpb.didcwiavafkgmfy

com.hcgetl.nysgtxkveqdzrpb.sgadjbzwmdi

Android Permissions

98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk