cerberus | e18c854179780dac39ee884f1e4258cc7890f8667edc88b3b107940b4f160021 | Triage

Submit
Reports

Overview

overview

Static

static

Android APK

android_x86_64

Sharing

General

Target

e18c854179780dac39ee884f1e4258cc7890f8667edc88b3b107940b4f160021
Size

3.5MB
Sample

210420-jqgphsgtxa
MD5

5f0ccd770e9808bf740c5bf529b50fd8
SHA1

b2137b6f49460024cdea143e5cf3f92cedd694d4
SHA256

e18c854179780dac39ee884f1e4258cc7890f8667edc88b3b107940b4f160021
SHA512

4dc3e729d00b3c0a777fbf3882f22814c8e6246e72eb8c3a386e4f79b704ea5d9f5d6ca1232071c6889d1b9f33252794540e34884f6ee6e2c4ba70536b128ae1

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat stealth trojan

Static task

static1

Behavioral task

behavioral1

Sample

e18c854179780dac39ee884f1e4258cc7890f8667edc88b3b107940b4f160021.apk

Resource

android-x86_64

cerberus banker evasion infostealer obfuscation rat stealth trojan

android_x86_64

0 signatures

0 seconds

Malware Config

Extracted

Family

cerberus

C2

http://45.153.185.33/

Targets

- Target
  
  e18c854179780dac39ee884f1e4258cc7890f8667edc88b3b107940b4f160021
- Size
  
  3.5MB
- MD5
  
  5f0ccd770e9808bf740c5bf529b50fd8
- SHA1
  
  b2137b6f49460024cdea143e5cf3f92cedd694d4
- SHA256
  
  e18c854179780dac39ee884f1e4258cc7890f8667edc88b3b107940b4f160021
- SHA512
  
  4dc3e729d00b3c0a777fbf3882f22814c8e6246e72eb8c3a386e4f79b704ea5d9f5d6ca1232071c6889d1b9f33252794540e34884f6ee6e2c4ba70536b128ae1
Score

10^/10

cerberus banker evasion infostealer obfuscation rat stealth trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Removes its main activity from the application launcher
  stealth trojan
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationratstealthtrojan

© 2018-2024

Terms | Privacy