General
- Target a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
- Size 3.4MB
- Sample220521-pklhmafea2
- SHA256 a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
- MD5 3e324e61184e75c95ea2149ee9be0478
- SHA1 87b46e38d16c07b2625ebb3fe8ee4847c0119775
- SHA512 4880497b1249d024d77f022c4590c9b73b17c379592b1700ab88cce738434727337e651e0f3bffacc6c45394de76c498d495b660d2cc149c6b8cf4b5d816d390
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
alienbot
C2
-
http://fightfightgame.info
Targets
-
- Target a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
- Size 3.4MB
- SHA256 a79603d93209ed455d83694300afe91d62e1d6d80a52406ba02750872efaad56
- MD5 3e324e61184e75c95ea2149ee9be0478
- SHA1 87b46e38d16c07b2625ebb3fe8ee4847c0119775
- SHA512 4880497b1249d024d77f022c4590c9b73b17c379592b1700ab88cce738434727337e651e0f3bffacc6c45394de76c498d495b660d2cc149c6b8cf4b5d816d390
- MD5 SHA1 SHA512
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.