Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e0383ce956c1a31c44367d6886dc36d7e036771b6351082567a9e434cc1018d

  • Size

    3.3MB

  • Sample

    210415-wvqanwmrn6

  • MD5

    3f93e3279edf578831b29bff17f59818

  • SHA1

    25302af735ddb9fb6a2aa878915aa202ffcf7766

  • SHA256

    9e0383ce956c1a31c44367d6886dc36d7e036771b6351082567a9e434cc1018d

  • SHA512

    735635863c5a72f29c0cd380bdd87185b866f7010477548c32d26fec0c05fb0bf927d734a9e7faf6b0e54530d3b0a936d386cb388f09ccff561bdd5c88a06bf3

Score
10/10
cerberusandroidbankerevasioninfostealerobfuscationratstealthtrojan

Malware Config

Extracted

Family

cerberus

C2

http://easywebb-td-online.com

Targets

    • Target

      9e0383ce956c1a31c44367d6886dc36d7e036771b6351082567a9e434cc1018d

    • Size

      3.3MB

    • MD5

      3f93e3279edf578831b29bff17f59818

    • SHA1

      25302af735ddb9fb6a2aa878915aa202ffcf7766

    • SHA256

      9e0383ce956c1a31c44367d6886dc36d7e036771b6351082567a9e434cc1018d

    • SHA512

      735635863c5a72f29c0cd380bdd87185b866f7010477548c32d26fec0c05fb0bf927d734a9e7faf6b0e54530d3b0a936d386cb388f09ccff561bdd5c88a06bf3

    Score
    10/10
    cerberusbankerevasioninfostealerobfuscationratstealthtrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Tries to add a device administrator.

    behavioral1

MITRE ATT&CK Matrix

Tasks