General
-
Target
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9
-
Size
1.4MB
-
Sample
220521-d9qyvscahk
-
MD5
7557a88cf8e930d33675a1cf2a3ca0f0
-
SHA1
dff8dd372f1d3137bb41820f89b67acecb7204c1
-
SHA256
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9
-
SHA512
3d8214805293c47ed91b40653619396d1a82a9310a27c7979723a0f3b5d7d67c198802f534ba98ac882d5090c9913b7e930335edf13a7a4a658c8cdb9d4feed8
Static task
static1
Behavioral task
behavioral1
Sample
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://alskdalksdlaksdjlaigpopoinojasg.info/
Targets
-
-
Target
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9
-
Size
1.4MB
-
MD5
7557a88cf8e930d33675a1cf2a3ca0f0
-
SHA1
dff8dd372f1d3137bb41820f89b67acecb7204c1
-
SHA256
25f8c85774f2c0cfb7122f2a1de2301498c70c239a42d0cd9399c904c22a35b9
-
SHA512
3d8214805293c47ed91b40653619396d1a82a9310a27c7979723a0f3b5d7d67c198802f534ba98ac882d5090c9913b7e930335edf13a7a4a658c8cdb9d4feed8
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-