cerberus | 418b67fe185da6593d47174dd5b9e02eef840cbcff2696800b6c5bd7d3474bc0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Androidupdate.apk
Size 2.6MB
Sample211013-ynn8csfafq
SHA256 418b67fe185da6593d47174dd5b9e02eef840cbcff2696800b6c5bd7d3474bc0
MD5 e62736efcf51548162c75b2afb915345
SHA1 323ba25956e9cf83e790024c2cc60ff5a39a6b46
SHA512 d97948aee3a6ed967e140d997959436e0944edb77ed598d1887cc2e6da1c0a563be57b671084f340e3ee79c839579ebd2d979b009242a4b2723880e3ae2e7ca5
MD5 SHA1 SHA512

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Extracted

Family

cerberus

C2

http://20.90.106.208/

Targets

- Target
  Androidupdate.apk
- Size 2.6MB
- SHA256 418b67fe185da6593d47174dd5b9e02eef840cbcff2696800b6c5bd7d3474bc0
- MD5 e62736efcf51548162c75b2afb915345
- SHA1 323ba25956e9cf83e790024c2cc60ff5a39a6b46
- SHA512 d97948aee3a6ed967e140d997959436e0944edb77ed598d1887cc2e6da1c0a563be57b671084f340e3ee79c839579ebd2d979b009242a4b2723880e3ae2e7ca5
- MD5 SHA1 SHA512
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan