General
-
Target
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4
-
Size
1.5MB
-
Sample
220520-11fg4ahfep
-
MD5
1440b048649a76a81cdd0e008f8f318a
-
SHA1
c99a6c0bd811ed4ab77ccdc14128df1129f80158
-
SHA256
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4
-
SHA512
6e3e5a88392462d2a39e4e75ed6ba36a206732d4160c9170e02159631f8c156d1a4e03b13aed875de1e1a58e22805d40f7f2bcbdc75a626420539d12c2fcaa37
Static task
static1
Behavioral task
behavioral1
Sample
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://fsdfjsdjfsjdfsj.cyou
Targets
-
-
Target
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4
-
Size
1.5MB
-
MD5
1440b048649a76a81cdd0e008f8f318a
-
SHA1
c99a6c0bd811ed4ab77ccdc14128df1129f80158
-
SHA256
c6e15f9a460ff3e5c532bed71e1654993af5c07037df59d352b53df20ae7a3c4
-
SHA512
6e3e5a88392462d2a39e4e75ed6ba36a206732d4160c9170e02159631f8c156d1a4e03b13aed875de1e1a58e22805d40f7f2bcbdc75a626420539d12c2fcaa37
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-