General
-
Target
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9
-
Size
1.7MB
-
Sample
220521-d9vbaacahm
-
MD5
21b543378713458253e1b616d80a6b08
-
SHA1
84488d46e4b996f5f3aade805a8c7742436f919b
-
SHA256
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9
-
SHA512
45e92649c48a9e4bcd39b719d508453f6ade966c8bbf3163cc8f28de9f3f84bcb0a881d673f2d17f37fc2c700b8e25ac0974ae15014b68e207c0f2e35a807355
Static task
static1
Behavioral task
behavioral1
Sample
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://bulan337.site
Targets
-
-
Target
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9
-
Size
1.7MB
-
MD5
21b543378713458253e1b616d80a6b08
-
SHA1
84488d46e4b996f5f3aade805a8c7742436f919b
-
SHA256
bc882bec0ec2e4c41c50b89153e36d31ee3d47028c7703bfc1488e05732d7ef9
-
SHA512
45e92649c48a9e4bcd39b719d508453f6ade966c8bbf3163cc8f28de9f3f84bcb0a881d673f2d17f37fc2c700b8e25ac0974ae15014b68e207c0f2e35a807355
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-