General
-
Target
c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99 (1).apk
-
Size
3.6MB
-
Sample
211124-r2gxwachgm
-
MD5
a9a69efa43b3a4d4b1c0f01986f5538a
-
SHA1
4112b9f368e53da23757c86cb094f4ba18054fa0
-
SHA256
c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99
-
SHA512
1d09cb37a30322c14f373f8b172490cf68b4fec7020e4e1c908aae801123ed7ccdc5d2be65105394e047802912554b08ed1118b95207b34f089763d1fcf09700
Static task
static1
Behavioral task
behavioral1
Sample
c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99 (1).apk
Resource
android-x86-arm
Malware Config
Extracted
alienbot
http://opensearchi.kz
Targets
-
-
Target
c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99 (1).apk
-
Size
3.6MB
-
MD5
a9a69efa43b3a4d4b1c0f01986f5538a
-
SHA1
4112b9f368e53da23757c86cb094f4ba18054fa0
-
SHA256
c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99
-
SHA512
1d09cb37a30322c14f373f8b172490cf68b4fec7020e4e1c908aae801123ed7ccdc5d2be65105394e047802912554b08ed1118b95207b34f089763d1fcf09700
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-