General

  • Target

    ad71c6b78c0d36053cab7a2c06bfb0b461d003bfad2b78e6c20a62a3e706b702.bin

  • Size

    545KB

  • MD5

    2ac8d081626ab699579d48e9b660aeff

  • SHA1

    682e301261a62a4c4975a6dbbcb0157f02f9138c

  • SHA256

    ad71c6b78c0d36053cab7a2c06bfb0b461d003bfad2b78e6c20a62a3e706b702

  • SHA512

    ca5c7a71f56798c8bacde9333ea098f702270a16b1bdaf62e138930970359a572963e596b56dc8720c9a2963a79113f20c41f9f25dcfb4011b6b4ab8199c6d82

  • SSDEEP

    12288:aYUlXzyUDq6N32YNjUPbT+Kuqzlelokqr2AlH20blQ7W42gnuz21UlX/:aXlXfqcmuOTruqzoykqrFlW0p42z+UlP

Score
10/10

Malware Config

Signatures

  • Cerberus family
  • Cerberus payload 1 IoCs
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • ad71c6b78c0d36053cab7a2c06bfb0b461d003bfad2b78e6c20a62a3e706b702.bin
    .apk android

    com.mhiauaqmlacl.ypmsfwbkjhsbeoz

    com.mhiauaqmlacl.ypmsfwbkjhsbeoz.dhadsej


Android Permissions

ad71c6b78c0d36053cab7a2c06bfb0b461d003bfad2b78e6c20a62a3e706b702.bin

Permissions

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO