General

  • Target

    sample

  • Size

    5.1MB

  • MD5

    ba2160d4969e8ae5af87638de8fd877a

  • SHA1

    aa0e4fd47f2e806d8ffa2debc1325c6b1f1c2237

  • SHA256

    6485ead2248298b48d4e677d3fb740b8ce8688bc7b4adb7a4d2ac3af827da46b

  • SHA512

    b250c62845509736ac1c729777f89ae28275161b1103ed280d507b30e3bfee7a674bef752edae552d45fb6e2b9e5161582813c8d398d7776845b9be76878f1a7

  • SSDEEP

    98304:lSzjfwxWeA9z9h78Rhz9y0+CkteiHvGyXztnwww2wYwvwzHHfroN7:lej39z9+0Zvte2vGyXztwhjJ4W

Score
10/10

Malware Config

Extracted

Family

cerberus

Attributes
  • uri

    /gate.php?action=botcheck&data=

    /gate.php?action=checkAP&data=

    /gate.php?action=getModule&data=

    /gate.php?action=getinj&data=

    /gate.php?action=injcheck&data=

    /gate.php?action=registration&data=

    /gate.php?action=sendInjectLogs&data=

    /gate.php?action=sendKeylogger&data=

    /gate.php?action=sendSmsLogs&data=

    /gate.php?action=timeInject&data=

Signatures

  • Cerberus family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • sample
    .apk android

    com.application.chronme

    com.service.app.fake


Android Permissions

sample

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE