Extracted

Extracted

• • Target

    1831495570c780ad7fb2bc7e1fc6c3ac2cfa4cf3ac0621112473599ce006dd8b.bin

  • Size

    1.6MB

  • MD5

    6a1d6665665378b51fcb07e4fa9e4faa

  • SHA1

    42c5255100f83b51e02237d899d95b4c80f996cd

  • SHA256

    1831495570c780ad7fb2bc7e1fc6c3ac2cfa4cf3ac0621112473599ce006dd8b

  • SHA512

    56616d59057277167c6aaf512716d0867444b2254f1c70b2bbb1308b2eab227c79167cc7de33a954cc02f90f2d1928caaca47e41c0748fde6c7ce0a17b747deb

  • SSDEEP

    49152:u+6VmaCA6WZzwSiMIeInIO1mH7Ng5gjtu:ukaCA6Wef3PnIpNg5gJu

  Score

  10^/10

  cerberusbankercollectioncredential_accessdiscoveryevasionimpactinfostealerpersistenceprivilege_escalationratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries the mobile country code (MCC)

    discovery

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3