General
-
Target
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c
-
Size
2.0MB
-
Sample
220521-pkckqafdh3
-
MD5
49ea02357e6f6f028e44711a1d10da19
-
SHA1
05935f542d17cf0902b4b81c67464214403ede9b
-
SHA256
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c
-
SHA512
03b6fedab94ef69c92f9923b5e939aaaf26acd123686ed7bdc30f6fe23830064f69293c06bf7b6053fa82e11cc05e4ce9c617375108a68b714b9b2b5f5b90f98
Static task
static1
Behavioral task
behavioral1
Sample
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://mmkigvfe.com
Targets
-
-
Target
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c
-
Size
2.0MB
-
MD5
49ea02357e6f6f028e44711a1d10da19
-
SHA1
05935f542d17cf0902b4b81c67464214403ede9b
-
SHA256
2146e26d07866ea59ff5cd7929e0a0a9ecd9f4b7c36cc17355526420cf3ae96c
-
SHA512
03b6fedab94ef69c92f9923b5e939aaaf26acd123686ed7bdc30f6fe23830064f69293c06bf7b6053fa82e11cc05e4ce9c617375108a68b714b9b2b5f5b90f98
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-