cerberus | d8071648501ee764dfb6fd2117714d34eac96ed910c6732fa87f99c667b9a77e | Triage

Sharing

General

Target

Android_Guncelleme.apk
Size

3.1MB
Sample

210806-4zslswpk56
MD5

16060181190318a3cdf9cf246780b9c6
SHA1

3f32423e67ed3cb7dbde3af364a4cc6dc348519d
SHA256

d8071648501ee764dfb6fd2117714d34eac96ed910c6732fa87f99c667b9a77e
SHA512

b23efb9662ff6cc0d45261db92beee87a2d3bb58a26ad96577f1c3b8f00eaabaaffbf73411333f48a0321182c96af55c6b279b8650eca2837711fc0fc6e7452f

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Extracted

Family

cerberus

C2

http://bestofjazhe.xyz

Targets

- Target
  
  Android_Guncelleme.apk
- Size
  
  3.1MB
- MD5
  
  16060181190318a3cdf9cf246780b9c6
- SHA1
  
  3f32423e67ed3cb7dbde3af364a4cc6dc348519d
- SHA256
  
  d8071648501ee764dfb6fd2117714d34eac96ed910c6732fa87f99c667b9a77e
- SHA512
  
  b23efb9662ff6cc0d45261db92beee87a2d3bb58a26ad96577f1c3b8f00eaabaaffbf73411333f48a0321182c96af55c6b279b8650eca2837711fc0fc6e7452f
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan

behavioral2

behavioral3

cerberusbankerevasioninfostealerobfuscationrattrojan