General
-
Target
Bildirim_obf.apk
-
Size
3.1MB
-
Sample
210827-s3jyyjag2s
-
MD5
906fa025f84da7144000a26f2609deec
-
SHA1
6e9a59a56e65672ec6f1f002aec438f8e29f86a7
-
SHA256
1a5bf2c57b4851d2e2186298a7cbd438e5cae349836700a5dc6102615ed0c36a
-
SHA512
b46be3f8348f7b8f278bc12a5c50b3df929f82ce8b1e5d6ad8aa12c2aae5c7dcf7f65d1a1cf65d8794f0abe8dbd24d55da30de8d0fda1f5bef38b025a854aba6
Static task
static1
Behavioral task
behavioral1
Sample
Bildirim_obf.apk
Resource
android-x64-arm64
Malware Config
Extracted
alienbot
http://34.107.122.112
Targets
-
-
Target
Bildirim_obf.apk
-
Size
3.1MB
-
MD5
906fa025f84da7144000a26f2609deec
-
SHA1
6e9a59a56e65672ec6f1f002aec438f8e29f86a7
-
SHA256
1a5bf2c57b4851d2e2186298a7cbd438e5cae349836700a5dc6102615ed0c36a
-
SHA512
b46be3f8348f7b8f278bc12a5c50b3df929f82ce8b1e5d6ad8aa12c2aae5c7dcf7f65d1a1cf65d8794f0abe8dbd24d55da30de8d0fda1f5bef38b025a854aba6
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads name of network operator
Uses Android APIs to discover system information.
-