Analysis
-
max time kernel
48s -
max time network
151s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
29-03-2024 08:05
General
-
Target
1cf421285b8999a9bf72dabe19d67027_JaffaCakes118.apk
-
Size
2.6MB
-
MD5
1cf421285b8999a9bf72dabe19d67027
-
SHA1
b49489c238f0126a1ac0f78ac7752f3e185787bc
-
SHA256
102508ca812d1c70e1ce8cb1c28ff5ef4b14716341ed6813f03cf84330cb76f1
-
SHA512
a97cadd1f961187823a255a113f90a35f62966c8765fe417e2aaf57d34ea5f89d0d5662655ed18f12a7ccd39e9951f3963b9048525650230c4bf28b9a7cde0a6
-
SSDEEP
49152:nYgunFOFYVuZumJS8kXI6dkX1vvWurD6giDCg/OL6SRQc9Q0gGy1:YgweYVmnYLI6Q3/rmgiB22SR/5gGy1
Malware Config
Extracted
cerberus
http://161.97.187.209
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes
-
com.near.swing1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
124KB
MD5275d47d84366ca7b5c465e8437437273
SHA16222aa41910a97426e9bb3091ac0e5c06a2a0512
SHA256559cf368f759a3295d30297a28580e43051fad22b45248b0d10d4116708bda59
SHA512b83df88d9252160c76fcd738d87618c24a39c1a240838e4251eb9390f4cd2e9be1980e5681010e9545e92ccb2129b686d13c68a5aa7a736703258eda824187fc
-
Filesize
124KB
MD544649c58cb4c6a5af17926716392b16d
SHA172acc848a4777bdfda19ec605b9320ed51dff113
SHA256043319775a555f2026b96e064ce091255ead5f7066e112dcbe9b0fd032ccf4bc
SHA512a6988390fda839aa266bdb0a1b6883924a564d3971859b844ce9f3d255c92695c747fd9f3b7eb5b6885dec90c1365878964eb154d045c37a1ccc7bc77fdf2c17
-
Filesize
204B
MD562782300f090accaeeca37e3749f258f
SHA12440bcbd91187cd1040bb00e17d2cd7af3612884
SHA256f0a904f177285a130e163fb023de493ce0c13b4294f6fa013cbd7b6da6744de8
SHA512d96bd32906222e2537989a6b2d9592bcd42b854f5522467b431f2c362479d3c077d2873324c130a0b79763b7a17993c37bee0c27ddd2b7c6e9f0ef7a0489b509