Overview

overview

10

Static

static

8

Android APK

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Android_Guncelleme.apk

  • Size

    4.5MB

  • Sample

    210805-e4lyffyyj6

  • MD5

    d8c06445e9d07ce80c8a1b135b2f7cbf

  • SHA1

    8aea297967bb110cc33db3c1d2cfd00091d68a7f

  • SHA256

    2d1370802093457d7bb7b151278ff6fcd2e8944e56d87ffc483422bef2f6d8e2

  • SHA512

    4401d54c2276593e8e0335bbc455f48396c3b923a66e77b785e3ad17caa8a80a73b26f4667710b7d550f27603d92a1cf28fb74b851e36327f5a873924c84a77b

Score
10/10
cerberusandroidbankerevasioninfostealerobfuscationrattrojan

Malware Config

Extracted

Family

cerberus

C2

http://107.172.197.121/

Targets

    • Target

      Android_Guncelleme.apk

    • Size

      4.5MB

    • MD5

      d8c06445e9d07ce80c8a1b135b2f7cbf

    • SHA1

      8aea297967bb110cc33db3c1d2cfd00091d68a7f

    • SHA256

      2d1370802093457d7bb7b151278ff6fcd2e8944e56d87ffc483422bef2f6d8e2

    • SHA512

      4401d54c2276593e8e0335bbc455f48396c3b923a66e77b785e3ad17caa8a80a73b26f4667710b7d550f27603d92a1cf28fb74b851e36327f5a873924c84a77b

    Score
    10/10
    cerberusbankerevasioninfostealerobfuscationrattrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks