Overview

overview

10

Static

static

8

Android_Gu...me.apk

android_x86

10

Android_Gu...me.apk

android_x64

Android_Gu...me.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Android_Guncelleme.apk

  • Size

    3.8MB

  • Sample

    210730-4kq5frccpx

  • MD5

    297d24a3d6c05a5366c29751af616fdb

  • SHA1

    486ac9c4519933e0ec4e3c48de6a96b64c646933

  • SHA256

    5bbdb67c1cc59effd644a51ac825cf74c9d12bc6ba2f480543fb9cfd851b5cf2

  • SHA512

    9ce0966e1eb81b7d9105b4c9e6d92e41498fec5a35f5aa66e819fc0bf7d4ed31efbc2f83e34d7396cfeae59e715a42c8457b822e82ed79a847ba2ba8c485eccd

Score
10/10
cerberusandroidbankerevasioninfostealerobfuscationrattrojan

Malware Config

Targets

    • Target

      Android_Guncelleme.apk

    • Size

      3.8MB

    • MD5

      297d24a3d6c05a5366c29751af616fdb

    • SHA1

      486ac9c4519933e0ec4e3c48de6a96b64c646933

    • SHA256

      5bbdb67c1cc59effd644a51ac825cf74c9d12bc6ba2f480543fb9cfd851b5cf2

    • SHA512

      9ce0966e1eb81b7d9105b4c9e6d92e41498fec5a35f5aa66e819fc0bf7d4ed31efbc2f83e34d7396cfeae59e715a42c8457b822e82ed79a847ba2ba8c485eccd

    Score
    10/10
    cerberusbankerevasioninfostealerobfuscationrattrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks