General
-
Target
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb
-
Size
2.3MB
-
Sample
220213-p2pllscacq
-
MD5
e747bf2176196039fe2d4c4554728a8f
-
SHA1
adc8aca22e30c546ee0efc6cbe2340ff2cc3329c
-
SHA256
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb
-
SHA512
e0660af3b33062964137c568e589ef8a26147c0ca83eb40afd0e57e0f296fc0fe8c8dd5fdb66a5fe2eac8a5e40518f4da796721919829eee0611a46bccb6e68f
Static task
static1
Behavioral task
behavioral1
Sample
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb.apk
Resource
android-x64
Behavioral task
behavioral3
Sample
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb.apk
Resource
android-x64-arm64
Malware Config
Extracted
alienbot
http://tifoumiz.com
Targets
-
-
Target
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb
-
Size
2.3MB
-
MD5
e747bf2176196039fe2d4c4554728a8f
-
SHA1
adc8aca22e30c546ee0efc6cbe2340ff2cc3329c
-
SHA256
df77910503d7fefae3915bb372455575e335b33e6a6f82f7cf8f5957c68daadb
-
SHA512
e0660af3b33062964137c568e589ef8a26147c0ca83eb40afd0e57e0f296fc0fe8c8dd5fdb66a5fe2eac8a5e40518f4da796721919829eee0611a46bccb6e68f
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-