General
-
Target
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb
-
Size
1.8MB
-
Sample
220524-1k8hyachfp
-
MD5
d88b199cdb6a995b386a149dd383e15c
-
SHA1
c8b7697e23bc27928ae0798a7d0a509e7c25ff75
-
SHA256
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb
-
SHA512
4e0c5f8806d0cdb956a5a634f0b97abde4c252c882cd1b0b28a441b53e11416ef75797515d3673bc65e8a1e678443928dcedac8499b8121c918d84cfbb21a1e1
Static task
static1
Behavioral task
behavioral1
Sample
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://gesibaglarindadolaniyorumm.top
Targets
-
-
Target
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb
-
Size
1.8MB
-
MD5
d88b199cdb6a995b386a149dd383e15c
-
SHA1
c8b7697e23bc27928ae0798a7d0a509e7c25ff75
-
SHA256
192ba0f7e9eb71fdc5263128218e725964ea9f57c5f13f7888bf950d2b962ddb
-
SHA512
4e0c5f8806d0cdb956a5a634f0b97abde4c252c882cd1b0b28a441b53e11416ef75797515d3673bc65e8a1e678443928dcedac8499b8121c918d84cfbb21a1e1
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-