General
-
Target
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c
-
Size
1.5MB
-
Sample
220520-z9dt7adfb9
-
MD5
3a41995a56fb1daa066d0c8c6464c861
-
SHA1
4ed5c16e3e7212d18e3804e9f42a7f90e6eef24d
-
SHA256
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c
-
SHA512
be5e017bd5cd1e03c880245fbdb30e99b1e46bcf0f5e7c23c735b05bac07f9cb388fb19c1d3d5b076e52f95bdfc67e31403393afddb8d045bd0bb362159b0c95
Static task
static1
Behavioral task
behavioral1
Sample
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://nesenbenibitirebildin.cyou
Targets
-
-
Target
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c
-
Size
1.5MB
-
MD5
3a41995a56fb1daa066d0c8c6464c861
-
SHA1
4ed5c16e3e7212d18e3804e9f42a7f90e6eef24d
-
SHA256
ca4bf446ab44314ec4aa8d06034af2bd1e40455665ccd9ff48cfef5234bc678c
-
SHA512
be5e017bd5cd1e03c880245fbdb30e99b1e46bcf0f5e7c23c735b05bac07f9cb388fb19c1d3d5b076e52f95bdfc67e31403393afddb8d045bd0bb362159b0c95
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-