Extracted

• • Target

    53e26b14bbe63d9bb61c1688df9304fa.zip

  • Size

    3.6MB

  • MD5

    53e26b14bbe63d9bb61c1688df9304fa

  • SHA1

    b8dafae1ea3eaccfdd5f320f2ba673ee56042083

  • SHA256

    3467d2b744b5609bb03f0af1916e50cfd1ceb2587b097b9bd0617031b59cc38a

  • SHA512

    0291429c7592b93525f4db4a0ebe1b5947af9be5bd9b9602f56b937f94609f274d6cd4aacf390ca870fd1f0253391379f719697939c11c803ae9662596fabf02

  • SSDEEP

    98304:TdSJSpELHkHKfZpQ0WoF0GRE1mCjPhXdR8L2dpggoe:BcSpYgKBWG0ICNdRlLnH

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3