Extracted

• • Target
    39184e0c52ee804e0c0fa988193e0c1f
  • Size 119KB
  • SHA256 e5058aa3e87cc6bb71fdcb959554e14f5354da24b23350296e406d3f1559a1c3
  • MD5 39184e0c52ee804e0c0fa988193e0c1f
  • SHA1 c91dca0e425ab7a1e85d14ed54033a1a094308f5
  • SHA512 fd5503077351c6a51e606c92007994c88b8b9c3a45bb01db8ad5b381d2eef58364caefdde81e2332932bf1d467e3f327246a08d0029ba66408ab719793002836
  • SSDEEP 3072:aEo0zISHXD0zMegVtqYLlCVhfLb0Dcdg9xxAhsghsH010K0f:afeISHXDEJgXPLIhfLADcS9xxArq010h
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3