cerberus | 0ace67f99b45b8200d0c644fe212cff0dbc5123ace0477dfc453a3c13cf3430a | Triage™

Resubmissions

04/02/2023, 23:11

230204-26blrsfa5310

16/03/2021, 21:36

210316-xv312p4ssa10

Sharing

Copy URL Twitter E-mail

General

Target
AndroidOS11.3.16.5.apk
Size 3.2MB
Sample210316-xv312p4ssa
SHA256 0ace67f99b45b8200d0c644fe212cff0dbc5123ace0477dfc453a3c13cf3430a
MD5 f67520ac449f9b339c33f2bf6b827646
SHA1 a44b2ee5e46c444e7aa025b537d6166dda908d26
SHA512 1ea416f71c900683393db4846199f6729a12c47a04a06f84e9d685f79dc9b9285d1eedc1c6fdb00dd0e8b1d18c6b19415827cb0c7670823771eb5fa90389548a
MD5 SHA1 SHA512

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat stealth trojan

Malware Config

Extracted

Family

cerberus

C2

http://univerpromo.ga

Targets

- Target
  AndroidOS11.3.16.5.apk
- Size 3.2MB
- SHA256 0ace67f99b45b8200d0c644fe212cff0dbc5123ace0477dfc453a3c13cf3430a
- MD5 f67520ac449f9b339c33f2bf6b827646
- SHA1 a44b2ee5e46c444e7aa025b537d6166dda908d26
- SHA512 1ea416f71c900683393db4846199f6729a12c47a04a06f84e9d685f79dc9b9285d1eedc1c6fdb00dd0e8b1d18c6b19415827cb0c7670823771eb5fa90389548a
- MD5 SHA1 SHA512
Score

10^/10

cerberus banker evasion infostealer obfuscation rat stealth trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Removes its main activity from the application launcher
  stealth trojan
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationratstealthtrojan