General
-
Target
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f
-
Size
1.6MB
-
Sample
220524-2trgfsagf7
-
MD5
d6fa3f868d084f56ef75591326d23333
-
SHA1
e485b576a473cd35011327a38cdd26a75b4c969a
-
SHA256
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f
-
SHA512
79a2461f69f9cb0f8bafb681b3cdb661f6fe783a21dfa63663a9c4ddbec8846a6ea17d819eb20fe0f85c3a943e2916d864e81bdf68cd78e987eca708fd8a5662
Static task
static1
Behavioral task
behavioral1
Sample
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://digitalmark.top
Targets
-
-
Target
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f
-
Size
1.6MB
-
MD5
d6fa3f868d084f56ef75591326d23333
-
SHA1
e485b576a473cd35011327a38cdd26a75b4c969a
-
SHA256
2b395ca8b06da975e26fb613e69212c770cd2249d587c3be2720ae1f7386fe1f
-
SHA512
79a2461f69f9cb0f8bafb681b3cdb661f6fe783a21dfa63663a9c4ddbec8846a6ea17d819eb20fe0f85c3a943e2916d864e81bdf68cd78e987eca708fd8a5662
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-