General

  • Target

    4ff8711bf263b5c3639955fbaef00cd2213e66ad313cdb7b56168c4e246c0087.bin

  • Size

    4.1MB

  • MD5

    75a2736783f300b9807605150f87e2e0

  • SHA1

    f209e391a383de93dd1b40ebe0a179cc6a962587

  • SHA256

    4ff8711bf263b5c3639955fbaef00cd2213e66ad313cdb7b56168c4e246c0087

  • SHA512

    dc6ba9cf71bd2ce956c15093ba9758bb1d57dc0e1bcb4e41b320934648c109db5af4ffb709fbaa4afcdfe18262701b50b0cb210f15a56cde21b12fb6f067a639

  • SSDEEP

    98304:CHfrnVBhwOtm4i+e71GKNxYZZggvlWl7Oz2cB4Bsq/tde:0iOtNWxGKNAvvAlTk4B9Vde

Score
10/10

Malware Config

Extracted

Family

cerberus

Attributes
  • uri

    /gate.php?action=botcheck&data=

    /gate.php?action=checkAP&data=

    /gate.php?action=getModule&data=

    /gate.php?action=getinj&data=

    /gate.php?action=injcheck&data=

    /gate.php?action=registration&data=

    /gate.php?action=sendInjectLogs&data=

    /gate.php?action=sendKeylogger&data=

    /gate.php?action=sendSmsLogs&data=

    /gate.php?action=timeInject&data=

Signatures

  • Cerberus family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 4ff8711bf263b5c3639955fbaef00cd2213e66ad313cdb7b56168c4e246c0087.bin
    .apk android

    com.application.chrome

    com.service.app.fake


Android Permissions

4ff8711bf263b5c3639955fbaef00cd2213e66ad313cdb7b56168c4e246c0087.bin

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE