Extracted

• • Target

    163c2cff8cd941dbce727de2df9df5fdfaaddde8f6d3db86270e2abf7e0ea19f

  • Size

    2.2MB

  • MD5

    43af9a0afff6a08f37ae4426a87fd5bf

  • SHA1

    9a441ece55c1beb6011891918cfc27877fb5c911

  • SHA256

    163c2cff8cd941dbce727de2df9df5fdfaaddde8f6d3db86270e2abf7e0ea19f

  • SHA512

    5704c3016dca1f6763d44fc72826a041f8a55214d195f5ffb15d06b3bec025ac8fe6c5d7a8c01ad3bcf111a3d9a1e38076c99f3cf43700934d099b99d808e738

  Score

  10^/10

  alienbotbankerinfostealertrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Makes use of the framework's Accessibility service.

  • Acquires the wake lock.

  • Checks Qemu related system properties.

    Checks for Android system properties related to Qemu for Emulator detection.

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  behavioral1behavioral2behavioral3