General

  • Target

    55a309040785c8bad70ea95a9a7a15751508a082b6b8120c4d1ef7c44ae1653a.bin

  • Size

    227KB

  • MD5

    d5fbd57ff117a7de6e02c3039471a0f8

  • SHA1

    68a14baecb6c9c7ed89dd05b63c657261b69bd58

  • SHA256

    55a309040785c8bad70ea95a9a7a15751508a082b6b8120c4d1ef7c44ae1653a

  • SHA512

    741e279ecab4befd12347a4783b24992767929c341352c80258c37b17aade196e98107f6007ce74298bd56b0a35c4d32b18fd6f6244d73c6be7eb7b3eb726ce0

  • SSDEEP

    6144:Ta8sa7XvmrCvFFORhJCjlsslG5h28U8nvG:WHiNtURhXOC28UN

Score
10/10

Malware Config

Extracted

Family

cerberus

Attributes
  • uri

    /gate.php?action=botcheck&data=

    /gate.php?action=checkAP&data=

    /gate.php?action=getModule&data=

    /gate.php?action=getinj&data=

    /gate.php?action=injcheck&data=

    /gate.php?action=registration&data=

    /gate.php?action=sendInjectLogs&data=

    /gate.php?action=sendKeylogger&data=

    /gate.php?action=sendSmsLogs&data=

    /gate.php?action=timeInject&data=

Signatures

  • Cerberus family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 55a309040785c8bad70ea95a9a7a15751508a082b6b8120c4d1ef7c44ae1653a.bin
    .apk android

    com.nigger.kike

    com.nigger.kike.mainActivity


Android Permissions

55a309040785c8bad70ea95a9a7a15751508a082b6b8120c4d1ef7c44ae1653a.bin

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK