General
-
Target
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd
-
Size
1.8MB
-
Sample
220521-eac4dscbar
-
MD5
dfd5e3854a0352e98bf31a8679879086
-
SHA1
27486a5cda8183776e4031e9582e048b357deb0f
-
SHA256
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd
-
SHA512
3453dbdc131540095f6a473fa03f55844807496cad099d56279ab67a7d44b4588d11ed9c39a32beedc827bcd8a85d4da442f8ed8d78eeb3dc6aac73b73069abb
Static task
static1
Behavioral task
behavioral1
Sample
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://installerflas678352.xyz
Targets
-
-
Target
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd
-
Size
1.8MB
-
MD5
dfd5e3854a0352e98bf31a8679879086
-
SHA1
27486a5cda8183776e4031e9582e048b357deb0f
-
SHA256
b5e190ccd6458c193ac2eb2bd24d2f03a09a008d2bd4f8d5f368b6b4136554dd
-
SHA512
3453dbdc131540095f6a473fa03f55844807496cad099d56279ab67a7d44b4588d11ed9c39a32beedc827bcd8a85d4da442f8ed8d78eeb3dc6aac73b73069abb
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-