Analysis
-
max time kernel
72s -
max time network
149s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
29-02-2024 09:43
General
-
Target
ae338ecd0e84e30cb0962d26ea2797cb.apk
-
Size
3.2MB
-
MD5
ae338ecd0e84e30cb0962d26ea2797cb
-
SHA1
04d1634a310fa44282d8abe6763dfd851d84c4d4
-
SHA256
4a3d77f8c3e8d8ecbbfeda70b661f57dc4d2382996615938c71de6a4cfc2f03f
-
SHA512
9cd57469232cc692b4321df7eb1b630426f2921611801221212b8abd2a5a75b95d811a43835e8030222c8ca105c0eed850152e4f2c850d34bd1ffccd1c233aa8
-
SSDEEP
49152:s5V2pYyoevMC7JZ2AMrvHGFOWkMHlkOIdrg3nD2nexrqP+BNfEsholdZOOUkv:5ToekpepQW6neh7ei4v
Malware Config
Extracted
cerberus
http://sallamadamarmy100.xyz
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes
-
enough.similar.pizza1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
696KB
MD57ff60b8ecf91c892a44d5d085bc7c3b7
SHA19f9b66295d670d1a4edbe941adde32219a120ea3
SHA2568f538deda8a837a3571283543cb893055d2ff7a68d2340861dcf62e835f41974
SHA512be22ebaa605d5cdcc7a8e3c6611e65790bb06eb64aa1245c48279c3140819d4fb961ac00911c6799620114a1f09b4bbbf3334d60810a8a6c0c3a0405f1f2db7e
-
Filesize
696KB
MD5c14439f36c4125ba94ed8136a2fe1096
SHA1d6af701ad82c2c57b3102355297263a0cdc03837
SHA256850bbf0c32fa282303aebda14d08ea0a649c0900d4842be22666ec424736c876
SHA5124ce4dfd4a91c56edccd35f88d21100129ef9dc20e7ad8e4d4c514b2e2160b22263330e41014461d8296ce880c97c067145b8a5669fc0a2c74b30f4ca89f26638
-
Filesize
234B
MD5d1d140742dac5db3f9b065f5b79c8bfe
SHA16e4f7650865f7bf744bd60cab9229324208286d2
SHA256c76278abbf56cce003fff033bad0e4358ca55666568bd3a3c0ac8e64028b40bc
SHA512a3f59ee03054bc0ced615c9c28f077dab90d073a5f0252f0c76ab7107b9282747cbeb14803346a7ddb89ac32be7f6aa2c0ff1fa2d34e1ccee7c61804890beeff