Extracted

• • Target

    1cf421285b8999a9bf72dabe19d67027_JaffaCakes118

  • Size

    2.6MB

  • MD5

    1cf421285b8999a9bf72dabe19d67027

  • SHA1

    b49489c238f0126a1ac0f78ac7752f3e185787bc

  • SHA256

    102508ca812d1c70e1ce8cb1c28ff5ef4b14716341ed6813f03cf84330cb76f1

  • SHA512

    a97cadd1f961187823a255a113f90a35f62966c8765fe417e2aaf57d34ea5f89d0d5662655ed18f12a7ccd39e9951f3963b9048525650230c4bf28b9a7cde0a6

  • SSDEEP

    49152:nYgunFOFYVuZumJS8kXI6dkX1vvWurD6giDCg/OL6SRQc9Q0gGy1:YgweYVmnYLI6Q3/rmgiB22SR/5gGy1

  Score

  10^/10

  cerberusbankercollectionevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3