Extracted

• • Target

    8d69dfc7d3b5c0287d903ab8ae77bddc

  • Size

    3.0MB

  • MD5

    8d69dfc7d3b5c0287d903ab8ae77bddc

  • SHA1

    c9b79ab4ad84cd03b9f407bdf317c6016a086921

  • SHA256

    5315585afd6d471dbc5aeb15031c19c3735645f5ec806f87f0c91bf061bcc6f3

  • SHA512

    79549a7054c54eb18ebfb411bcf4456cd33e8683df2f2e336de73a75d137e9b3da8eebfc4b1ab39403c64af9c7bab520400ad98bec4619b92cfed2b821083737

  • SSDEEP

    98304:q1QJDqWMfANx6wJ3bVUyV2IGDU/oTADeI:q1MDbMwcwJ3f2Ig+L

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3