General
-
Target
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f
-
Size
1.6MB
-
Sample
220520-gzttjsdfb6
-
MD5
a789dfd6a75368fa6d219ab6e9d65d2c
-
SHA1
e901187bfa142ccacb3eb1a84cf5ef9dcee2d3ef
-
SHA256
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f
-
SHA512
fbb296a7c38b74eb1cd358b3cfeed4c81722ad40d221230b08163bbefd653707cd61887ab7064f7b6c9c6eefb89e04bcceed4adfe5eeb688353e33cd3df9d236
Static task
static1
Behavioral task
behavioral1
Sample
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://fillimillidilli.top
Targets
-
-
Target
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f
-
Size
1.6MB
-
MD5
a789dfd6a75368fa6d219ab6e9d65d2c
-
SHA1
e901187bfa142ccacb3eb1a84cf5ef9dcee2d3ef
-
SHA256
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f
-
SHA512
fbb296a7c38b74eb1cd358b3cfeed4c81722ad40d221230b08163bbefd653707cd61887ab7064f7b6c9c6eefb89e04bcceed4adfe5eeb688353e33cd3df9d236
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-