Analysis
-
max time kernel
71s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
29-03-2024 17:57
General
-
Target
28e0d06562a6e0df8dad0fa04e4c33ac_JaffaCakes118.apk
-
Size
2.7MB
-
MD5
28e0d06562a6e0df8dad0fa04e4c33ac
-
SHA1
aa2511f7546d97e327b4a6a027f3195f62e04117
-
SHA256
aa5ea17832aa74736e26ab68b569c83b38d705289df49bb98c0aa5c9657fbe11
-
SHA512
946d78b5d85c2fd5c59e5eb406f9bcc99784305a24f416832742049bd7eabe6a3b6d327fcfac6d9d3bf5eaf73490317d1708a54ec2622643a8c9b6f2a1a4b73d
-
SSDEEP
49152:KmIaOnTtAJESpMYAKueNChLFN1y2uTLsMcd+8ntL/8JnD4FE4Niw1gh05n/6TqM+:xIa4TtAJEvDKueNkzQcd5dIKE4N7gh0D
Malware Config
Extracted
cerberus
https://232323zonenenmamsmaspacedmmdsmd.space/
Signatures
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes
-
com.define.cake1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
124KB
MD5d638f2bead4b49a71a8ac30d18e48693
SHA1d4fb78822cd773caab6f500e94c95accd6819a9f
SHA256815b82e55881ddbb0d0bc8759cd42eeeb0a7eddeb2d65f5a57695ca3a25a71ed
SHA512a22ff691b85d7755b708c6f7c2f5afdf8e03a550594b84585099d12f2d00d0fd7f5f1f20aef3b08f1ba0e2581649d67fc6e4d359b6f6b8cb6e1c23d659ab1823
-
Filesize
124KB
MD5fb4adcacba26d10255469d87e92b7469
SHA16e00b9aff113694c27e7d95c35a3b0bbd71a5f3d
SHA256483be7a9079820b2f3e0247363b2d53a5373e6a442d283df28e1dca117163082
SHA512e7f79651153007e7c6c5694d8482628f2b5541771378bcc49b5f8b18b355e170bd480026ee8f1bd428f7b8a2423d72081928f34e256da455066fda6431faee7c
-
Filesize
804B
MD5998fdaf80a3914fd8bab04b724e2658b
SHA151ee6dfdb195e926c98633b0fcd2119fa5f3dc78
SHA2568b135b42f05255aba8a5e4d7ceecfdfb015c154956f53dd494f84c0674d131fa
SHA512004926e717efefee4c16457b174ca342ac312c326231ef86c6525d9da17be6b76b26d5905c594428f42df914449c82b40abf7d7fc4ce1c095e9bcaa5c94b4976