General
-
Target
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
-
Size
2.0MB
-
Sample
220602-mnbrgsfaf6
-
MD5
df2cca4519794070ad7671435a3a1e11
-
SHA1
e3c369e86eabdba643e0a4c3f34488bc64b11789
-
SHA256
e1d863e16d0585609677790971d97a394376e1bb6a96da221719738249669c5a
-
SHA512
d7be25260a822fa98352cd56ca815eaecf2f6d03f7538613f0b9bb2a3cf3022e728db9321000a3ec575cfabb81011e16fe24fcb22026a9a5ad01442f4ae97278
Static task
static1
Behavioral task
behavioral1
Sample
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://kurutses11.com
Targets
-
-
Target
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
-
Size
2.0MB
-
MD5
df2cca4519794070ad7671435a3a1e11
-
SHA1
e3c369e86eabdba643e0a4c3f34488bc64b11789
-
SHA256
e1d863e16d0585609677790971d97a394376e1bb6a96da221719738249669c5a
-
SHA512
d7be25260a822fa98352cd56ca815eaecf2f6d03f7538613f0b9bb2a3cf3022e728db9321000a3ec575cfabb81011e16fe24fcb22026a9a5ad01442f4ae97278
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-