Extracted

• • Target

    4edb08cbf1b0dda9b0d087d5bedfe8766bf47ce3fde040f6f86440d184acafcc

  • Size

    2.0MB

  • MD5

    04c28fccb57622f167fb361457fa3c9d

  • SHA1

    0a6365dee1f2f01b61f24d806889e82630dca613

  • SHA256

    4edb08cbf1b0dda9b0d087d5bedfe8766bf47ce3fde040f6f86440d184acafcc

  • SHA512

    10446f6a7973a3d17870ca1c6770d2d29c553ec83995359260a7e5806263df573098fe91d8b8fb8914b0f11d986dc5a83283797663f0b09a2b754fb9c69d2e4d

  Score

  10^/10

  alienbotbankerevasioninfostealertrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Makes use of the framework's Accessibility service.

  • Acquires the wake lock.

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Removes a system notification.

    evasion
  behavioral1behavioral2behavioral3