Extracted

• • Target

    0dafa2f9e2434c39fe23f4de9003d9fb

  • Size

    3.8MB

  • MD5

    0dafa2f9e2434c39fe23f4de9003d9fb

  • SHA1

    a04b8799afa41dc13616488521c6117fa950152c

  • SHA256

    15f9db03d333cd81db87367c854c96555eb605d16cc21ee607a1c16b279f9e34

  • SHA512

    b9c5dadd39007b34df7f4c99ae7636106058555f0b7da105befa45852d616ead25ef4d5cecebdcef408f3d454ee97cc72c71cfae9604eeb791511cb62210d7e7

  • SSDEEP

    98304:2MZAwxmwQIKjIrNFNmUCHyX8p52l7D56LrWOUaj:2MZAumnbqN/foyLl2l

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3