Extracted

• • Target

    2135231a42538e68fa5f23c68ab4d9de_JaffaCakes118

  • Size

    2.2MB

  • MD5

    2135231a42538e68fa5f23c68ab4d9de

  • SHA1

    cdb9753b5f355dc0af80332a83451ec609ccef6f

  • SHA256

    ab5d44f5bf24e5c459088a2ed1469653e7703d133bfab8fa7ec72c0cd91852d0

  • SHA512

    b82ca2d5d1e55f4efdd4a2dd1c31a28b9eb06683e4edc4f0ce2593c7894b0a8a4744cdce53a039d8db6f4eeb73f8e4dd13c233b58613ade5f17a854e1eae9360

  • SSDEEP

    49152:ULfUJngykjQYcykGeOM2EIr6quNl6r+EcNHuCZ1Ol6xdq8oGMst3SFc:ULMJgtjpVktOMXIr6bl6rcOCZ1osd3oq

  Score

  10^/10

  cerberusbankercollectionevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3

• • Target

    jaxb-api-dexed.jar

  • Size

    48KB

  • MD5

    6113fd8ed956dc48c3329fc6a100db68

  • SHA1

    d88a70dfc4a60644a372a173e270668d62a41f58

  • SHA256

    880d35f713d9db8ad3fa55542c0310f92b04fe4376ec58d313e924a935800604

  • SHA512

    884a4c8914b1046c5054e171b05412f774fbb01f9260735086657643eaf93bc03f3281481883b75d4042459d9af82288e69917cd5b5e8069ca37bbc265f91d0c

  • SSDEEP

    768:LjqhUlRQVd9UHPj1UNeSBW5WrdnOgguRLTy+cI1Eg+vraTDHw+eLMdpVmajjlTd:3gwQRUHPJUpBPrdnK+7+vrIzPPlTd

  Score

  1^/10
  behavioral4behavioral5behavioral6