Analysis
-
max time kernel
54s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
29-03-2024 11:49
General
-
Target
2135231a42538e68fa5f23c68ab4d9de_JaffaCakes118.apk
-
Size
2.2MB
-
MD5
2135231a42538e68fa5f23c68ab4d9de
-
SHA1
cdb9753b5f355dc0af80332a83451ec609ccef6f
-
SHA256
ab5d44f5bf24e5c459088a2ed1469653e7703d133bfab8fa7ec72c0cd91852d0
-
SHA512
b82ca2d5d1e55f4efdd4a2dd1c31a28b9eb06683e4edc4f0ce2593c7894b0a8a4744cdce53a039d8db6f4eeb73f8e4dd13c233b58613ade5f17a854e1eae9360
-
SSDEEP
49152:ULfUJngykjQYcykGeOM2EIr6quNl6r+EcNHuCZ1Ol6xdq8oGMst3SFc:ULMJgtjpVktOMXIr6bl6rcOCZ1osd3oq
Malware Config
Extracted
cerberus
http://20.90.106.208/
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes
-
com.drop.enjoy1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
122KB
MD5f09d61171ae13baddf641a61f38a3b90
SHA1f45438fe3617626b87450ece5f89cf678dd4daaa
SHA25643b18e7d3ef297ccc15e13789673f0784374f9730b3099a251c58fc7adba6a52
SHA51283a40e8f21677bda4fe12d3fa1122961e7d53486d988ce3be28a50546c3d17c295d860e3fcef36f80da04f7487092e066128d1d6a5adedba02f8fa71649a69dd
-
Filesize
122KB
MD51129c4a33d2e2a75a40862258ab980b8
SHA164950404a3aaa2850412f564e293d628bb037506
SHA256f8d0cdf98bf543c840300d232dc41c85c2b3072c9d4ae0a3865f54e4443ea510
SHA512b4fca6d30bf724a397d75827b6894f7b98010cdd567b906777d8f1a03b22305ee00f896aaf38a90378b97f5877575c02f53569fb01cf2041b446e9cce3ba6f00
-
Filesize
826B
MD5bbe3b667ca3378c1b4c05d9bc6489282
SHA19600ebd208fd08fe0041965901b5fb77d787d719
SHA2568ba46ac948858695607060d95aad18399d92777cf8e8e9ebbfa6ceba8950868b
SHA512a2c198f4ccec347ca7628fa8a1d5ec5e52b3083ae353650649db2af0d1f11e91b4ea411fcf84a3c9978495623f81b39ed821d31db86546d5444710ca574e11f5