cerberus | e674b628f42f780ba3caa27de32b14a13788c98bfcceb59ff7a01a5c11db6e94 | Triage

Sharing

General

Target

DEV_PORNO_YERLİ_İFŞA_VİDEOLARI_obf.apk
Size

4.6MB
Sample

210805-yczrjmaxke
MD5

bf21c14df4ba8ca8dd5337b077a374b7
SHA1

0e98e9442c210eb96ee24baf502bd0e8420cfea9
SHA256

e674b628f42f780ba3caa27de32b14a13788c98bfcceb59ff7a01a5c11db6e94
SHA512

615b9fd2415bacc43f42dff8f753b23bc5758275ed9e7b87f0a2efd2c69121ca3127a73fd651595dc0c34c5de9f837aed97d0cb536176e0345a6cd8313985690

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Extracted

Family

cerberus

C2

http://144.126.152.229

Targets

- Target
  
  DEV_PORNO_YERLİ_İFŞA_VİDEOLARI_obf.apk
- Size
  
  4.6MB
- MD5
  
  bf21c14df4ba8ca8dd5337b077a374b7
- SHA1
  
  0e98e9442c210eb96ee24baf502bd0e8420cfea9
- SHA256
  
  e674b628f42f780ba3caa27de32b14a13788c98bfcceb59ff7a01a5c11db6e94
- SHA512
  
  615b9fd2415bacc43f42dff8f753b23bc5758275ed9e7b87f0a2efd2c69121ca3127a73fd651595dc0c34c5de9f837aed97d0cb536176e0345a6cd8313985690
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan

behavioral2

behavioral3

cerberusbankerevasioninfostealerobfuscationrattrojan