General
-
Target
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9
-
Size
1.5MB
-
Sample
220521-pj95laafep
-
MD5
26628cea0f6730e49a1e527a7354d41f
-
SHA1
78270866aeb9e03a2b7564da3101af46d46762cd
-
SHA256
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9
-
SHA512
631cb3afddf13be8aefcb485ececaea1212ef82add7f7f3db8f17e00e584f6adde56df88b28da2e6720d1ea437b40c27b99c01ff66c00beb8b01606c758a5edb
Static task
static1
Behavioral task
behavioral1
Sample
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://tambuland7.live
Targets
-
-
Target
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9
-
Size
1.5MB
-
MD5
26628cea0f6730e49a1e527a7354d41f
-
SHA1
78270866aeb9e03a2b7564da3101af46d46762cd
-
SHA256
66427521c50cd888548749f8527a3b503e9f381e49715a8c6d080689f22f3ad9
-
SHA512
631cb3afddf13be8aefcb485ececaea1212ef82add7f7f3db8f17e00e584f6adde56df88b28da2e6720d1ea437b40c27b99c01ff66c00beb8b01606c758a5edb
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-