Extracted

• • Target

    9f27dc864bde034b381e8d6f5528194867b5338c0a176c15efee136208143d19.bin

  • Size

    1.1MB

  • MD5

    4ecacc991c3ae16a9daa8036d54b93d5

  • SHA1

    9626c8a65b8951e47ff20af9f436c38043cb6e2d

  • SHA256

    9f27dc864bde034b381e8d6f5528194867b5338c0a176c15efee136208143d19

  • SHA512

    a0198f0b937e4d34f9f484aba5cb3d988c4907de4b308e0badd6e5420be45062fe56a3b9dff718b4f7fde1c4dd3494f53e3f8e0c87e19fee8fb26032357d9872

  • SSDEEP

    24576:mMnMOtjOs1njWqhBQguNiJdnWoDda/xgpO:tMOMS6q4guNAdBdSx+O

  Score

  10^/10

  cerberusbankercollectioncredential_accessdiscoveryevasionimpactinfostealerpersistenceratstealthtrojanprivilege_escalation

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Cerberus family

    cerberus

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries the mobile country code (MCC)

    discovery

  • Requests changing the default SMS application.

    collectionimpact

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Tries to add a device administrator.

    privilege_escalationimpact

  • Listens for changes in the sensor environment (might be used to detect emulation)

    evasion
  behavioral1behavioral2behavioral3