General
-
Target
YERLI_PORNO_IFSA_VIDEOLARI.apk
-
Size
2.7MB
-
Sample
210810-akfjbt3n7s
-
MD5
2c0f13b0cdce60ec006f155362da5443
-
SHA1
95a6959a752d9d0d2f11c902512f19aee7fb6787
-
SHA256
4d33c3c010f2110912208a54b5ca1f12df2aaed5615cf512dda4ba82c649eabb
-
SHA512
2538a5a74fe919e54478a1c06bf6315de829eba088c5e664ce112ed7ceff60df8e4a7b6c101cf044a90ca8f3efda605085e8f72d8b76db322fa287ec613ff854
Static task
static1
Behavioral task
behavioral1
Sample
YERLI_PORNO_IFSA_VIDEOLARI.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
YERLI_PORNO_IFSA_VIDEOLARI.apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
YERLI_PORNO_IFSA_VIDEOLARI.apk
Resource
android-x64
Malware Config
Extracted
alienbot
http://buralarnelerhkaldadad.club
Targets
-
-
Target
YERLI_PORNO_IFSA_VIDEOLARI.apk
-
Size
2.7MB
-
MD5
2c0f13b0cdce60ec006f155362da5443
-
SHA1
95a6959a752d9d0d2f11c902512f19aee7fb6787
-
SHA256
4d33c3c010f2110912208a54b5ca1f12df2aaed5615cf512dda4ba82c649eabb
-
SHA512
2538a5a74fe919e54478a1c06bf6315de829eba088c5e664ce112ed7ceff60df8e4a7b6c101cf044a90ca8f3efda605085e8f72d8b76db322fa287ec613ff854
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Requests enabling of the accessibility settings.
-
Reads name of network operator
Uses Android APIs to discover system information.
-