General
-
Target
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.jar
-
Size
3.7MB
-
Sample
220411-mw82ysghg9
-
MD5
6cf5d6abcc04d1d37c85df5dc543ba0e
-
SHA1
a6256e0aa101fc07319f19d6908f174ed8d14f5f
-
SHA256
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31
-
SHA512
5d5f1d000d3ee111b01aa7df044357778c5701848a3672de6817c2cb3452843bc8408f7e31cca1f3321ced0c444f9e6425ca419ef03a397d5f12e4736d31d18a
Static task
static1
Behavioral task
behavioral1
Sample
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://cupboardg2irl3c.com
Targets
-
-
Target
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.jar
-
Size
3.7MB
-
MD5
6cf5d6abcc04d1d37c85df5dc543ba0e
-
SHA1
a6256e0aa101fc07319f19d6908f174ed8d14f5f
-
SHA256
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31
-
SHA512
5d5f1d000d3ee111b01aa7df044357778c5701848a3672de6817c2cb3452843bc8408f7e31cca1f3321ced0c444f9e6425ca419ef03a397d5f12e4736d31d18a
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-