General
-
Target
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629
-
Size
1.4MB
-
Sample
220524-rmrtjahfbr
-
MD5
499a6d546e1eb0642592e09a4f51b925
-
SHA1
4138c0d496121b887ee1917a467e0977cbe7c65b
-
SHA256
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629
-
SHA512
8b3ea67f235b2ba38d2a03739514845a02beda9274a53ae357ab8cb17d16289e07f0152c5301f0023697dc1c2ab3bcaad835b98cb073f43039bd2a201041260b
Static task
static1
Behavioral task
behavioral1
Sample
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://operolstels12.xyz
Targets
-
-
Target
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629
-
Size
1.4MB
-
MD5
499a6d546e1eb0642592e09a4f51b925
-
SHA1
4138c0d496121b887ee1917a467e0977cbe7c65b
-
SHA256
09035d83bfadc216ac5829672d46ecb4efacfc3fe69be2eacca4dceba807b629
-
SHA512
8b3ea67f235b2ba38d2a03739514845a02beda9274a53ae357ab8cb17d16289e07f0152c5301f0023697dc1c2ab3bcaad835b98cb073f43039bd2a201041260b
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-