Extracted

• • Target

    99559267fc932d7dc65e0036fa2531ec

  • Size

    133KB

  • MD5

    99559267fc932d7dc65e0036fa2531ec

  • SHA1

    7604689c05cec08efeacc55b1e951fbe51e914a0

  • SHA256

    924872649ead11a01fdbec876bd3f6f1f6b184403c2fa5f2f625b646092c7c50

  • SHA512

    298a1d752cda70fe47ff873d1934862e09940071ebbcb484ee083d6651272aa7bcbc588ea8677835e2ac3b93406a148c1bbed27d192a54ba8b6aec6b4e53a362

  • SSDEEP

    3072:9RzS7bpOsRmLlbWHdh01MJaEmdEYKGv0muLuIQ2XzXcvNP:9RKxRmlyqMmE+0movQ2jsvd

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3