Analysis
-
max time kernel
42s -
max time network
145s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
20-03-2024 12:00
Static task
static1
Behavioral task
behavioral1
Sample
d8c06445e9d07ce80c8a1b135b2f7cbf.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
d8c06445e9d07ce80c8a1b135b2f7cbf.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
d8c06445e9d07ce80c8a1b135b2f7cbf.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
d8c06445e9d07ce80c8a1b135b2f7cbf.apk
-
Size
4.5MB
-
MD5
d8c06445e9d07ce80c8a1b135b2f7cbf
-
SHA1
8aea297967bb110cc33db3c1d2cfd00091d68a7f
-
SHA256
2d1370802093457d7bb7b151278ff6fcd2e8944e56d87ffc483422bef2f6d8e2
-
SHA512
4401d54c2276593e8e0335bbc455f48396c3b923a66e77b785e3ad17caa8a80a73b26f4667710b7d550f27603d92a1cf28fb74b851e36327f5a873924c84a77b
-
SSDEEP
98304:JL+vTaX0TIPgz7WItf0U1yvL2wJVTuanOgs1mCe1w4/Pgo:JL+vTaX0cPQ7JJr1yvLDJV6aOz3M/3
Malware Config
Extracted
cerberus
http://107.172.197.121/
Signatures
-
Makes use of the framework's Accessibility service 2 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText online.stay.adapt Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId online.stay.adapt Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId online.stay.adapt -
pid Process 5110 online.stay.adapt -
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/online.stay.adapt/app_DynamicOptDex/HYpRM.json 5110 online.stay.adapt /data/user/0/online.stay.adapt/app_DynamicOptDex/HYpRM.json 5110 online.stay.adapt -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener online.stay.adapt
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
603KB
MD50ff4d81c45bf00191470725783be70b5
SHA1ca62310e49c07641a6914ae9ac870d6ed7c24771
SHA2565046cf6cb6a63fbd5c4d9f32df08f401f4a535591c6fd89a5ebb6e1f30dd5e60
SHA512f9e7c1c53debf1b0fb6cfcd15ec225ba5b1979f0869548b308d4e64de04a8083b7aa1765d08fb712d942031b83c20d468c5b2fe3c4b192268dfffbb684de85f9
-
Filesize
603KB
MD5a4cfe79b50c2bcc259966eb9937ca346
SHA195e53bfaea9a6d3e45949dcc75110c4a4211bb8a
SHA256ff0599b0d6669f804f864491d4e39c97c9426476ae6897ac9922391cb616ad28
SHA512a1f216136b2f7e5049388142c80f6585265ed943c2b89c29134135b503878377911aec8410b437ae1d28042466b9f59aa293bc55927560d624145a58c8dd4331