General
-
Target
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839
-
Size
1.7MB
-
Sample
220201-esjnwshah4
-
MD5
ae8158afe08a63dfa62ef1625b8c3002
-
SHA1
33175fb15c19ad7d29c4c0a500ed570376d690f6
-
SHA256
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839
-
SHA512
987753531f76d823aae67880383d0d08aaae2730dc8979e8952812cd0278c38d28f72109151f2692024aeda75b7ee6b0a54fee4ca4c55ba0cbb71255ba700baa
Static task
static1
Behavioral task
behavioral1
Sample
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839.apk
Resource
android-x64
Behavioral task
behavioral3
Sample
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839.apk
Resource
android-x64-arm64
Malware Config
Extracted
alienbot
http://botduke1.ug
Targets
-
-
Target
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839
-
Size
1.7MB
-
MD5
ae8158afe08a63dfa62ef1625b8c3002
-
SHA1
33175fb15c19ad7d29c4c0a500ed570376d690f6
-
SHA256
bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839
-
SHA512
987753531f76d823aae67880383d0d08aaae2730dc8979e8952812cd0278c38d28f72109151f2692024aeda75b7ee6b0a54fee4ca4c55ba0cbb71255ba700baa
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-