Extracted

• • Target

    9c5200a23dcebb4ef84a97352b6b865f

  • Size

    133KB

  • MD5

    9c5200a23dcebb4ef84a97352b6b865f

  • SHA1

    df4ac5ee9d114e22f413995bcc28376da66c74b0

  • SHA256

    d81c00d48f918cab3bdfdb461378872db0e2a076c648b07a8e80d9093fd35b75

  • SHA512

    e43cdb6b9e5d3b02297499730b88e0663dc1e7ded3af067578adb6e63590ece01fbd6c2c834be81c30302c8674f6824906584e168d44f7a7cbb1f559d3aa6fb2

  • SSDEEP

    3072:seDseSZnX0VD3xe676N/CQ0TSzX30KuLuIQ2XzXcvm:CeSNCDheE6N4U0KovQ2jsvm

  Score

  10^/10

  cerberusbankerevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3