General
- Target bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671.apk
- Size 416KB
- Sample211007-nls4escecq
- SHA256 bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671
- MD5 6a76dc76a67596215d6ecc7c90c7c277
- SHA1 6fcd011f40e5b70e64dc9090945b93a3896e67e9
- SHA512 5376cbe74e0911b9447facec246193dc8e49817c58bad2d1b35685e88ce65fe458fc6154124f60d8785ec8467d3890a014743eeb38f858741ec19eb66550f312
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671.apk
Resource
android-x64-arm64
0 signatures
0 seconds
Malware Config
Extracted
Family
-
alienbot
C2
-
http://ahmedosgayredosney.net
Targets
-
- Target bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671.apk
- Size 416KB
- SHA256 bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671
- MD5 6a76dc76a67596215d6ecc7c90c7c277
- SHA1 6fcd011f40e5b70e64dc9090945b93a3896e67e9
- SHA512 5376cbe74e0911b9447facec246193dc8e49817c58bad2d1b35685e88ce65fe458fc6154124f60d8785ec8467d3890a014743eeb38f858741ec19eb66550f312
- MD5 SHA1 SHA512
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Checks Android system properties for emulator presence.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads name of network operator
Uses Android APIs to discover system information.