Cerberus Android Banker Trojan (ES)

SMS:
bit.ly/39h6wxb (redir)
https://dismissanample.cam/?ref=SMSx (redir)
https://dismissanample.cam/index3.php?ref=SMSx&js=1&hasPlugins=0&maxTouch=0 (redir)

Download:
https://dismissanample.cam/landing.php
https://pageshell.casa/landing.php

Targets:
es.lacaixa.mobile.android.newwapicon
com.bankinter.launcher
es.cm.android
com.bankia.wallet
com.bbva.bbvacontigo
com.bbva.netcash
com.kutxabank.android
es.evobanco.bancamovil
es.bancosantander.apps
com.tecnocom.cajalaboral

C2's (IP 8.208.96.194):
silverball.cc
quickregistration.top

Otros dominios en la misma IP:
cliamsresistant.top
snowshoes.top
rapsongz.top
heartssun.club
notfamous.top
dopestteam.cc

Sandboxs:
https://www.joesandbox.com/analysis/346263/0/html
https://www.virustotal.com/gui/file/98dcf2c7cff451cad4338650e46cdb816b1637321b2e2a759c65193a1b66e7f3/details