Extracted

• • Target

    60f109c8e2e904faaf663dcad5ff23b9e68c4f84c77c78350b637a92cfb4cf51.bin

  • Size

    1.6MB

  • MD5

    c63a29d9a5a2658647745b5c85b93d6a

  • SHA1

    4f7964878de95149893301528919b627b9ce33b1

  • SHA256

    60f109c8e2e904faaf663dcad5ff23b9e68c4f84c77c78350b637a92cfb4cf51

  • SHA512

    897addf559aa9df246ce1cf8d340f6d0647a8780160e98f3f7c8e6d06c1d40093b43abdae2d239ed3af55e7c0c64707c24f9fc83eb7b7015bc1510a2f9db42d0

  • SSDEEP

    49152:lGt5jc6hwbrAGR+w88gm0MElmXpK565Hvp/mq+h4LMp:lGt5jbhwn9+mglmXsMWq+GQp

  Score

  10^/10

  cerberusbankercollectioncredential_accessdiscoveryevasionimpactinfostealerpersistenceprivilege_escalationratstealthtrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Cerberus family

    cerberus

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries the mobile country code (MCC)

    discovery

  • Requests changing the default SMS application.

    collectionimpact

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Tries to add a device administrator.

    privilege_escalationimpact

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3