General
-
Target
bundle.apk
-
Size
1.9MB
-
Sample
211206-r5ayqshca8
-
MD5
3ba482dd63f7e096e2a086385106115c
-
SHA1
dea24869cf5d965d5681984f6b035e98dd083337
-
SHA256
78ea4eb0b59b244a0b52fa0de88c550792867f797f1b8b3d9325aa7f642218e9
-
SHA512
74ce0dec5764c8e28b78518f9cccee925de5a2fbb4c183061385aa3a8dd962c3076c038d706956563ede4466af8bd44f5fd410d14733616ec809ed9fcfea221f
Static task
static1
Behavioral task
behavioral1
Sample
bundle.apk
Resource
android-x64-arm64
Malware Config
Extracted
alienbot
http://fiftiforfrisend.quest
Targets
-
-
Target
bundle.apk
-
Size
1.9MB
-
MD5
3ba482dd63f7e096e2a086385106115c
-
SHA1
dea24869cf5d965d5681984f6b035e98dd083337
-
SHA256
78ea4eb0b59b244a0b52fa0de88c550792867f797f1b8b3d9325aa7f642218e9
-
SHA512
74ce0dec5764c8e28b78518f9cccee925de5a2fbb4c183061385aa3a8dd962c3076c038d706956563ede4466af8bd44f5fd410d14733616ec809ed9fcfea221f
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-