Extracted

• • Target
    68e7f79c841aae5b3932b45ec1efebef85e7eab79ebc671aaab68f716924392d
  • Size 1.7MB
  • SHA256 68e7f79c841aae5b3932b45ec1efebef85e7eab79ebc671aaab68f716924392d
  • MD5 cc1410261a6320f6965913017206c2f6
  • SHA1 e8ce41a9b8947d51060edd5f41565e82848874a4
  • SHA512 f9a681df17d70c2ed6492a1b8020dca25fc5d8101a4f12fd6c1de1f8918eb8d3b5b70d7fcc279ba2b8dd198d61e3bdd77a24a6fd431547b8ec518e491ccc9223
  • MD5 SHA1 SHA512

  Score

  10^/10

  cerberusbankerevasioninfostealerratsuricatatrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

    suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

    suricata

  • suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

    suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

    suricata

  • Makes use of the framework's Accessibility service.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    banker

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

  behavioral1behavioral2behavioral3