cerberus | 392f2c9d5656e68cf9155d07dc83f4fdf7533369545f44bf4c5db7cc4900c99d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Android_Guncelleme (1).apk
Size 2.7MB
Sample211014-ygds2sbabl
SHA256 392f2c9d5656e68cf9155d07dc83f4fdf7533369545f44bf4c5db7cc4900c99d
MD5 29005e3560f583a14d22f348dc7e3db1
SHA1 13aeaea9b7601539a170e38a56dd44173454c668
SHA512 96bc3aac5e3fa88d2dd59a3270cca8e279752cf8f755149d641480e4f671be4b0b3217448760ec957fda1cd117ab3266e27653b52a926f3c6bc0bd84afad19b9
MD5 SHA1 SHA512

Score

10^/10

cerberus android banker evasion infostealer obfuscation rat trojan

Malware Config

Extracted

Family

cerberus

C2

http://194.163.187.220

Targets

- Target
  Android_Guncelleme (1).apk
- Size 2.7MB
- SHA256 392f2c9d5656e68cf9155d07dc83f4fdf7533369545f44bf4c5db7cc4900c99d
- MD5 29005e3560f583a14d22f348dc7e3db1
- SHA1 13aeaea9b7601539a170e38a56dd44173454c668
- SHA512 96bc3aac5e3fa88d2dd59a3270cca8e279752cf8f755149d641480e4f671be4b0b3217448760ec957fda1cd117ab3266e27653b52a926f3c6bc0bd84afad19b9
- MD5 SHA1 SHA512
Score

10^/10

cerberus banker evasion infostealer obfuscation rat trojan
- Cerberus
  An Android banker that is being rented to actors beginning in 2019.
  banker trojan infostealer evasion rat cerberus
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cerberusbankerevasioninfostealerobfuscationrattrojan