General
-
Target
Android-Guncelleme.apk
-
Size
2.9MB
-
Sample
210810-y9sarvgtya
-
MD5
ca7aec7eacd0f2820c73bf0a9523a382
-
SHA1
c9eb3866d202582495c07abe5d8fcdf47e6c98d0
-
SHA256
fb38636d1afb7c6df603ac4f441de7fd3d01c79c97577a5aca0afef8b2b8041b
-
SHA512
0fc462d58394a029eeb015c23f0c7b2d39a924a7c0efd8ef02451bb99c8503f330917b3ee1634d309a07a404eadb02420a2e4c63ffa118fd83c5a0e7a02e85ab
Static task
static1
Behavioral task
behavioral1
Sample
Android-Guncelleme.apk
Resource
android-x64
Malware Config
Extracted
alienbot
http://rareqtereqqer.sbs
Targets
-
-
Target
Android-Guncelleme.apk
-
Size
2.9MB
-
MD5
ca7aec7eacd0f2820c73bf0a9523a382
-
SHA1
c9eb3866d202582495c07abe5d8fcdf47e6c98d0
-
SHA256
fb38636d1afb7c6df603ac4f441de7fd3d01c79c97577a5aca0afef8b2b8041b
-
SHA512
0fc462d58394a029eeb015c23f0c7b2d39a924a7c0efd8ef02451bb99c8503f330917b3ee1634d309a07a404eadb02420a2e4c63ffa118fd83c5a0e7a02e85ab
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads name of network operator
Uses Android APIs to discover system information.
-