Overview

overview

10

Static

static

7

484F686247...5B.apk

android_x86

10

484F686247...5B.apk

android_x64

10

484F686247...5B.apk

android_x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    484F6862473B96487B7D2CB1079DF512403ED48AB25ADF6AA3738FB39ACC625B.apk
  • Size 2.3MB
  • Sample220602-kc9s2aedf2
  • SHA256 484f6862473b96487b7d2cb1079df512403ed48ab25adf6aa3738fb39acc625b
  • MD5 SHA1 SHA512
Score
10/10
cerberusandroidbankerevasioninfostealerrattrojan

Malware Config

Extracted

Family

  • cerberus

C2

  • http://lcnpro.net

Targets

    • Target
      484F6862473B96487B7D2CB1079DF512403ED48AB25ADF6AA3738FB39ACC625B.apk
    • Size 2.3MB
    • SHA256 484f6862473b96487b7d2cb1079df512403ed48ab25adf6aa3738fb39acc625b
    • MD5 SHA1 SHA512
    Score
    10/10
    cerberusbankerevasioninfostealerrattrojan

    • Cerberus

      An Android banker that is being rented to actors beginning in 2019.

      bankertrojaninfostealerevasionratcerberus

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks