General
-
Target
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
-
Size
3.4MB
-
Sample
220521-pklhmafea2
-
MD5
3e324e61184e75c95ea2149ee9be0478
-
SHA1
87b46e38d16c07b2625ebb3fe8ee4847c0119775
-
SHA256
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
-
SHA512
4880497b1249d024d77f022c4590c9b73b17c379592b1700ab88cce738434727337e651e0f3bffacc6c45394de76c498d495b660d2cc149c6b8cf4b5d816d390
Static task
static1
Behavioral task
behavioral1
Sample
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://fightfightgame.info
Targets
-
-
Target
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
-
Size
3.4MB
-
MD5
3e324e61184e75c95ea2149ee9be0478
-
SHA1
87b46e38d16c07b2625ebb3fe8ee4847c0119775
-
SHA256
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
-
SHA512
4880497b1249d024d77f022c4590c9b73b17c379592b1700ab88cce738434727337e651e0f3bffacc6c45394de76c498d495b660d2cc149c6b8cf4b5d816d390
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-