General
-
Target
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk
-
Size
1.7MB
-
Sample
220121-n65myshcbn
-
MD5
bacc0736a6feb5ea0968f5c60cc7835e
-
SHA1
c2bbd80c74b82ac75797026498e01b83dad01a2c
-
SHA256
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0
-
SHA512
6af546b653e7164c7b76f8f79e8c6fa2cd741758c84023b602eb00e0911de64dfa59494b23f86096b9bc35cc9241d304f31a78b03d09ed4823ebe11bd0ce3b15
Static task
static1
Behavioral task
behavioral1
Sample
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk
Resource
android-x64
Behavioral task
behavioral3
Sample
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk
Resource
android-x64-arm64
Malware Config
Extracted
alienbot
http://yoklesfomerdesgomres.net
Targets
-
-
Target
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk
-
Size
1.7MB
-
MD5
bacc0736a6feb5ea0968f5c60cc7835e
-
SHA1
c2bbd80c74b82ac75797026498e01b83dad01a2c
-
SHA256
11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0
-
SHA512
6af546b653e7164c7b76f8f79e8c6fa2cd741758c84023b602eb00e0911de64dfa59494b23f86096b9bc35cc9241d304f31a78b03d09ed4823ebe11bd0ce3b15
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-