General
-
Target
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994
-
Size
2.0MB
-
Sample
220524-2pg28aafc7
-
MD5
2889580b4a3cb93a28cf8eca33193a2b
-
SHA1
5c981633b21ded1661a70b373a75470fba3f26cf
-
SHA256
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994
-
SHA512
130c048463d43c2564924ec86ef6861b5f3619f640c8c0d1e1ef185f7c4dab20b6360d3755b317f5a3b9ce54ab8a3c0922bb19fd1ea604bfccfe0bf72f2bd4ec
Static task
static1
Behavioral task
behavioral1
Sample
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://burdamedemisin.top
Targets
-
-
Target
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994
-
Size
2.0MB
-
MD5
2889580b4a3cb93a28cf8eca33193a2b
-
SHA1
5c981633b21ded1661a70b373a75470fba3f26cf
-
SHA256
e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994
-
SHA512
130c048463d43c2564924ec86ef6861b5f3619f640c8c0d1e1ef185f7c4dab20b6360d3755b317f5a3b9ce54ab8a3c0922bb19fd1ea604bfccfe0bf72f2bd4ec
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-