General
-
Target
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862
-
Size
1.9MB
-
Sample
220525-aq38asghak
-
MD5
49a51ccaddafd8674f6a77b33f390ac9
-
SHA1
4fa6ff4b62ae881de087323fb8122804cfaf8b58
-
SHA256
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862
-
SHA512
666d180d815753b31e98a5419a38327c0e2f1fc19000f7bef90c6c15a2b961d6ea7cdce5bd6e540c3832233c29189ff6d9c40fe8337dc875ea6acde6b7e52828
Static task
static1
Behavioral task
behavioral1
Sample
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://ssssssthaniyokmugulduren.site
Targets
-
-
Target
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862
-
Size
1.9MB
-
MD5
49a51ccaddafd8674f6a77b33f390ac9
-
SHA1
4fa6ff4b62ae881de087323fb8122804cfaf8b58
-
SHA256
2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862
-
SHA512
666d180d815753b31e98a5419a38327c0e2f1fc19000f7bef90c6c15a2b961d6ea7cdce5bd6e540c3832233c29189ff6d9c40fe8337dc875ea6acde6b7e52828
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-