General
-
Target
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b
-
Size
2.0MB
-
Sample
220524-3r38xacad5
-
MD5
43b6ca712be5a971182a1e981c0f9d5f
-
SHA1
9175769071b277e3230dfdb94d2cb1d19e8b7341
-
SHA256
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b
-
SHA512
d00650e98ea177513ad3488cfc15b1d4a4130da4e05d4fe911a17bd829b955fd74642fd7a9f59b628a712a591a6f649ba3c6c9197b3f461fd0bf9ddf294c3a50
Static task
static1
Behavioral task
behavioral1
Sample
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://roseletters.top
Targets
-
-
Target
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b
-
Size
2.0MB
-
MD5
43b6ca712be5a971182a1e981c0f9d5f
-
SHA1
9175769071b277e3230dfdb94d2cb1d19e8b7341
-
SHA256
73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b
-
SHA512
d00650e98ea177513ad3488cfc15b1d4a4130da4e05d4fe911a17bd829b955fd74642fd7a9f59b628a712a591a6f649ba3c6c9197b3f461fd0bf9ddf294c3a50
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-