General
-
Target
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk
-
Size
1.6MB
-
Sample
220124-svqf4sfbg8
-
MD5
e20ee1ac142412523d58128c616881ba
-
SHA1
bc2e95e5d959012484e9abc1a70c077206d6e344
-
SHA256
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7
-
SHA512
9b26a8af1a0ebe3ab35285d5192493c7e04705634536e4dfc23ac683446b7fa4cfbdc09b99d592fd0008017d2155ec9e486ba8557c36cd5c0d55fb23f6b67d41
Static task
static1
Behavioral task
behavioral1
Sample
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk
Resource
android-x64
Behavioral task
behavioral3
Sample
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk
Resource
android-x64-arm64
Malware Config
Extracted
alienbot
http://irdelendiniz.co.vu
Targets
-
-
Target
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk
-
Size
1.6MB
-
MD5
e20ee1ac142412523d58128c616881ba
-
SHA1
bc2e95e5d959012484e9abc1a70c077206d6e344
-
SHA256
a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7
-
SHA512
9b26a8af1a0ebe3ab35285d5192493c7e04705634536e4dfc23ac683446b7fa4cfbdc09b99d592fd0008017d2155ec9e486ba8557c36cd5c0d55fb23f6b67d41
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-