cerberus | 6cebe6deeb4918f0cd0ca448a2c40e068bc0e374afac9bc99a79559289ab7f3c | Triage

Sharing

General

Target

pornoyuizle.apk
Size

4.7MB
Sample

210805-1shyasbrdx
MD5

804db0c00316f29a0e40b4b8d73068b9
SHA1

89e9092f0376ce1c9e9383d53050526af815ce7f
SHA256

6cebe6deeb4918f0cd0ca448a2c40e068bc0e374afac9bc99a79559289ab7f3c
SHA512

c54f8f2b43d810b0c334aaf099087f2517bfe6a1f1f973ba6469d71f885f55275d1718607284bbdfa7179ec10ad2384fd1b910f404051c8e0a2bbeceb2b079c8

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Extracted

Family

cerberus

C2

http://bestofjazhe.xyz

Targets

- Target
  
  pornoyuizle.apk
- Size
  
  4.7MB
- MD5
  
  804db0c00316f29a0e40b4b8d73068b9
- SHA1
  
  89e9092f0376ce1c9e9383d53050526af815ce7f
- SHA256
  
  6cebe6deeb4918f0cd0ca448a2c40e068bc0e374afac9bc99a79559289ab7f3c
- SHA512
  
  c54f8f2b43d810b0c334aaf099087f2517bfe6a1f1f973ba6469d71f885f55275d1718607284bbdfa7179ec10ad2384fd1b910f404051c8e0a2bbeceb2b079c8
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan

behavioral2

behavioral3

cerberusbankerevasioninfostealerobfuscationrattrojan