Extracted

• • Target

    26f36540d4010d3e1e41ea8d5718d94c66eb68e7db7b85dcbf007d5b76070c46.bin

  • Size

    2.1MB

  • MD5

    ed7863e89305c31703452084076575bf

  • SHA1

    a235e7039665b29e63c99ae0be7adf2ecef0a720

  • SHA256

    26f36540d4010d3e1e41ea8d5718d94c66eb68e7db7b85dcbf007d5b76070c46

  • SHA512

    916b749ab1030f8451f58e94261039c5691a0c8a6e5cbcc7638906583d5b74cdf2f1b44b76a53a614bd94369a756aa7531dc4ec781034d77cf7367f348bf0754

  • SSDEEP

    49152:fk2BgGr29n0T6JCeLuaw/RYjHSkiVuFGB0anxjMIq5PTm:fk2BgUcvLw/RGHSkiVKy0Z5i

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3