General
-
Target
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24
-
Size
1.7MB
-
Sample
220520-gzmp8sgecr
-
MD5
ec8896a5a8041cedf5479bab6a8601bf
-
SHA1
e97e32d1cbc26c13f708c13f0d61a0b6b50384c2
-
SHA256
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24
-
SHA512
9fe6a8f2caf14a646b97cd23e19b84fefbd2cc2b15b3c665adffcf733927c424b718b5bbcd255ce070e476f6d3b9e0dede7749211e2d20e85c5dfb9986e13537
Static task
static1
Behavioral task
behavioral1
Sample
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://fillimillidilli.top
Targets
-
-
Target
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24
-
Size
1.7MB
-
MD5
ec8896a5a8041cedf5479bab6a8601bf
-
SHA1
e97e32d1cbc26c13f708c13f0d61a0b6b50384c2
-
SHA256
4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24
-
SHA512
9fe6a8f2caf14a646b97cd23e19b84fefbd2cc2b15b3c665adffcf733927c424b718b5bbcd255ce070e476f6d3b9e0dede7749211e2d20e85c5dfb9986e13537
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-