Overview

overview

10

Static

static

7

Android-Update.apk

android_x86

10

Android-Update.apk

android_x64

Android-Update.apk

android_x64

10

Resubmissions

23-10-2021 08:31

211023-ke728acca3 10

23-10-2021 08:29

211023-kdkkjadbeq 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Android-Update.apk

  • Size

    2.3MB

  • Sample

    211023-ke728acca3

  • MD5

    28410521a9b1c16fdb9f023140dea669

  • SHA1

    6b40677d775473c4e8fe06614b06e6780bcab397

  • SHA256

    25bf855a1211003061517243f9b648072410208663d3084c73458a11d57fa1a0

  • SHA512

    b2dabae6d7c43d04bea502c88a0c698340b2469899bebdbf6ae4e76a85f76d91a846932f8470c2762aab2887aa959f2a5db2389bf67b12a6833f0e424dc8b032

Score
10/10
cerberusandroidbankerevasioninfostealerrattrojan

Malware Config

Extracted

Family

cerberus

C2

http://185.182.9.77

Targets

    • Target

      Android-Update.apk

    • Size

      2.3MB

    • MD5

      28410521a9b1c16fdb9f023140dea669

    • SHA1

      6b40677d775473c4e8fe06614b06e6780bcab397

    • SHA256

      25bf855a1211003061517243f9b648072410208663d3084c73458a11d57fa1a0

    • SHA512

      b2dabae6d7c43d04bea502c88a0c698340b2469899bebdbf6ae4e76a85f76d91a846932f8470c2762aab2887aa959f2a5db2389bf67b12a6833f0e424dc8b032

    Score
    10/10
    cerberusbankerevasioninfostealerrattrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks