Extracted

• • Target

    28e0d06562a6e0df8dad0fa04e4c33ac_JaffaCakes118

  • Size

    2.7MB

  • MD5

    28e0d06562a6e0df8dad0fa04e4c33ac

  • SHA1

    aa2511f7546d97e327b4a6a027f3195f62e04117

  • SHA256

    aa5ea17832aa74736e26ab68b569c83b38d705289df49bb98c0aa5c9657fbe11

  • SHA512

    946d78b5d85c2fd5c59e5eb406f9bcc99784305a24f416832742049bd7eabe6a3b6d327fcfac6d9d3bf5eaf73490317d1708a54ec2622643a8c9b6f2a1a4b73d

  • SSDEEP

    49152:KmIaOnTtAJESpMYAKueNChLFN1y2uTLsMcd+8ntL/8JnD4FE4Niw1gh05n/6TqM+:xIa4TtAJEvDKueNkzQcd5dIKE4N7gh0D

  Score

  10^/10

  cerberusbankercollectionevasioninfostealerratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3