Extracted

• • Target
    d81c00d48f918cab3bdfdb461378872db0e2a076c648b07a8e80d9093fd35b75.apk
  • Size 133KB
  • SHA256 d81c00d48f918cab3bdfdb461378872db0e2a076c648b07a8e80d9093fd35b75
  • MD5 9c5200a23dcebb4ef84a97352b6b865f
  • SHA1 df4ac5ee9d114e22f413995bcc28376da66c74b0
  • SHA512 e43cdb6b9e5d3b02297499730b88e0663dc1e7ded3af067578adb6e63590ece01fbd6c2c834be81c30302c8674f6824906584e168d44f7a7cbb1f559d3aa6fb2
  • SSDEEP 3072:seDseSZnX0VD3xe676N/CQ0TSzX30KuLuIQ2XzXcvm:CeSNCDheE6N4U0KovQ2jsvm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasioncerberusimpactinfostealerrattrojan

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Cerberus family

    cerberus

  • Checks Android system properties for emulator presence.

    defense_evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the phone number (MSISDN for GSM devices)

    discovery

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries the mobile country code (MCC)

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion

  • Listens for changes in the sensor environment (might be used to detect emulation)

    defense_evasion
  behavioral1