General
-
Target
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4
-
Size
1.4MB
-
Sample
220521-d96djscbal
-
MD5
af54d23662954dbf66a7d7ae75c0b2d8
-
SHA1
01d5948dc4f82623842897e96148b773995118dc
-
SHA256
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4
-
SHA512
756a06f6b2ea91a86c4c79ca136d79c8f34b8c898f7dbc6e992d03393e2ef74ca6999cac16eb4d51fa99da4c0d11e65a7e272e372a040cc60e6268c30f55e6e9
Static task
static1
Behavioral task
behavioral1
Sample
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://installerflas453873.xyz
Targets
-
-
Target
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4
-
Size
1.4MB
-
MD5
af54d23662954dbf66a7d7ae75c0b2d8
-
SHA1
01d5948dc4f82623842897e96148b773995118dc
-
SHA256
017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4
-
SHA512
756a06f6b2ea91a86c4c79ca136d79c8f34b8c898f7dbc6e992d03393e2ef74ca6999cac16eb4d51fa99da4c0d11e65a7e272e372a040cc60e6268c30f55e6e9
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-