cerberus | 25741ecd9e1b08c90dffa4818e4a3cd41ee73df5c7ecd3fc61201d7587f0ef39 | Triage

Sharing

General

Target

Android build_obf(3).apk
Size

2.4MB
Sample

210809-kt9nphbbwx
MD5

8326e1bfe6cb83651d772b24a1d6ac2c
SHA1

3aeddc6815e119ccb2cf63c798152b0ca4c2c396
SHA256

25741ecd9e1b08c90dffa4818e4a3cd41ee73df5c7ecd3fc61201d7587f0ef39
SHA512

9dfb94e0eed866bf4b7d94880dfb5378b14edf60e12ada47a42d1bf8666b1a56d5e7d91bbf7a7512f2dfe53aff3c31cfccdc5e6f4f206d7dafacfba1d87abd1c

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Extracted

Family

cerberus

C2

http://canavardomain.xyz

Targets

- Target
  
  Android build_obf(3).apk
- Size
  
  2.4MB
- MD5
  
  8326e1bfe6cb83651d772b24a1d6ac2c
- SHA1
  
  3aeddc6815e119ccb2cf63c798152b0ca4c2c396
- SHA256
  
  25741ecd9e1b08c90dffa4818e4a3cd41ee73df5c7ecd3fc61201d7587f0ef39
- SHA512
  
  9dfb94e0eed866bf4b7d94880dfb5378b14edf60e12ada47a42d1bf8666b1a56d5e7d91bbf7a7512f2dfe53aff3c31cfccdc5e6f4f206d7dafacfba1d87abd1c
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan

behavioral2

behavioral3

cerberusbankerevasioninfostealerobfuscationrattrojan