General
-
Target
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c
-
Size
2.2MB
-
Sample
220521-d9hbqahae3
-
MD5
46bee1617acc6208cce3b2b5c6eb57f8
-
SHA1
411a4ab57094f3dda939dcd7178192608ac5966b
-
SHA256
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c
-
SHA512
7252847ee15e5702785e791943c7a2dc4b946b8c4df9570e41309d4a97fcd205ba5571ce9a35d43c5b577da58778834fa877824057cbca1ff0460abe97f2a3e2
Static task
static1
Behavioral task
behavioral1
Sample
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://akarbvc11.site
Targets
-
-
Target
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c
-
Size
2.2MB
-
MD5
46bee1617acc6208cce3b2b5c6eb57f8
-
SHA1
411a4ab57094f3dda939dcd7178192608ac5966b
-
SHA256
e360bca3a85903e9aac73ca461ba5c70a03ed0f394597248807e9f1cabc6a26c
-
SHA512
7252847ee15e5702785e791943c7a2dc4b946b8c4df9570e41309d4a97fcd205ba5571ce9a35d43c5b577da58778834fa877824057cbca1ff0460abe97f2a3e2
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-