Overview

overview

10

Static

static

7

Porno_Izle.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Porno_Izle.apk

  • Size

    2.6MB

  • Sample

    211014-zge7jsacd3

  • MD5

    1cf421285b8999a9bf72dabe19d67027

  • SHA1

    b49489c238f0126a1ac0f78ac7752f3e185787bc

  • SHA256

    102508ca812d1c70e1ce8cb1c28ff5ef4b14716341ed6813f03cf84330cb76f1

  • SHA512

    a97cadd1f961187823a255a113f90a35f62966c8765fe417e2aaf57d34ea5f89d0d5662655ed18f12a7ccd39e9951f3963b9048525650230c4bf28b9a7cde0a6

Score
10/10
cerberusandroidbankerevasioninfostealerobfuscationrattrojan

Malware Config

Extracted

Family

cerberus

C2

http://161.97.187.209

Targets

    • Target

      Porno_Izle.apk

    • Size

      2.6MB

    • MD5

      1cf421285b8999a9bf72dabe19d67027

    • SHA1

      b49489c238f0126a1ac0f78ac7752f3e185787bc

    • SHA256

      102508ca812d1c70e1ce8cb1c28ff5ef4b14716341ed6813f03cf84330cb76f1

    • SHA512

      a97cadd1f961187823a255a113f90a35f62966c8765fe417e2aaf57d34ea5f89d0d5662655ed18f12a7ccd39e9951f3963b9048525650230c4bf28b9a7cde0a6

    Score
    10/10
    cerberusbankerevasioninfostealerobfuscationrattrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks