Overview

overview

10

Static

static

7

AndroidUpdate (1).apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AndroidUpdate (1).apk

  • Size

    2.9MB

  • Sample

    211014-p6dpxaheg4

  • MD5

    631170cab53cef6a3cc8a73d35a88ec6

  • SHA1

    a32828458410e5bfef4e18627f72456dd70727f1

  • SHA256

    e75bcc316514dacde0453a0766b46bc7075159ff9ae31e1d955c48fb745bf97f

  • SHA512

    a1a607418b6beae31483aa99a3d118195a7a315b45317dca134089091c792f03dbc1105f2983227a4fe303d4fe6bceec897d6832fb7693cb5c505230e3df14c2

Score
10/10
cerberusandroidbankerevasioninfostealerobfuscationrattrojan

Malware Config

Extracted

Family

cerberus

C2

https://budabelegedude111.xyz

Targets

    • Target

      AndroidUpdate (1).apk

    • Size

      2.9MB

    • MD5

      631170cab53cef6a3cc8a73d35a88ec6

    • SHA1

      a32828458410e5bfef4e18627f72456dd70727f1

    • SHA256

      e75bcc316514dacde0453a0766b46bc7075159ff9ae31e1d955c48fb745bf97f

    • SHA512

      a1a607418b6beae31483aa99a3d118195a7a315b45317dca134089091c792f03dbc1105f2983227a4fe303d4fe6bceec897d6832fb7693cb5c505230e3df14c2

    Score
    10/10
    cerberusbankerevasioninfostealerobfuscationrattrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks