General
-
Target
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0
-
Size
1.7MB
-
Sample
220521-d9jvjscagp
-
MD5
5be463c7c7a6ab1ec5e88daadd155a95
-
SHA1
5290898760157f49137d1e143d350a75ffe39dd6
-
SHA256
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0
-
SHA512
74461118c37412e7d7241c8cb43af3dd211d86099a27af42f938a79fcdf8b83ce8b292df6c6212cfb369100832e2bed5a92c65494014a1d542d1b350b965f8e5
Static task
static1
Behavioral task
behavioral1
Sample
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://benicildirtmeyinkoyarimsi.site
Targets
-
-
Target
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0
-
Size
1.7MB
-
MD5
5be463c7c7a6ab1ec5e88daadd155a95
-
SHA1
5290898760157f49137d1e143d350a75ffe39dd6
-
SHA256
af1d1415d8dc8373d42d90a6218fd5d5bcd947239c9ac073cea8209ef534d5e0
-
SHA512
74461118c37412e7d7241c8cb43af3dd211d86099a27af42f938a79fcdf8b83ce8b292df6c6212cfb369100832e2bed5a92c65494014a1d542d1b350b965f8e5
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-