cerberus | 9029424ae357c4aa55971b08793716b6f3354a8ef3fc1ee973e11b0bd862b4ca | Triage

Resubmissions

27-07-2021 22:48

210727-rp7gna4jjn 10

27-07-2021 22:47

210727-p1b72hgcbe 8

Sharing

General

Target

DEV_YERLI_PORNO_ARSIVI.apk
Size

4.1MB
Sample

210727-rp7gna4jjn
MD5

4d18cb346536a113f8a29619407385e0
SHA1

e91bb88e727f64c2ca140cdeec6836e401410eec
SHA256

9029424ae357c4aa55971b08793716b6f3354a8ef3fc1ee973e11b0bd862b4ca
SHA512

b45139a19e653c67704c3a498b08eeb8002795279c5b3c77d50738f7acf70436f3af57cc5119a8a33d126ba19e5f3528a3480190aa028a31180bdef6f44fe3c3

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Targets

- Target
  
  DEV_YERLI_PORNO_ARSIVI.apk
- Size
  
  4.1MB
- MD5
  
  4d18cb346536a113f8a29619407385e0
- SHA1
  
  e91bb88e727f64c2ca140cdeec6836e401410eec
- SHA256
  
  9029424ae357c4aa55971b08793716b6f3354a8ef3fc1ee973e11b0bd862b4ca
- SHA512
  
  b45139a19e653c67704c3a498b08eeb8002795279c5b3c77d50738f7acf70436f3af57cc5119a8a33d126ba19e5f3528a3480190aa028a31180bdef6f44fe3c3
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan

behavioral2

behavioral3

cerberusbankerevasioninfostealerobfuscationrattrojan