General
-
Target
E481FFF62FF9C05D597339C9F977A88B0E87B55D002BC33ABDF7474C376F6B48.apk
-
Size
1.6MB
-
Sample
220602-nc2zzafec6
-
MD5
24e8cacc70061be05359834dc9dd72bd
-
SHA1
3314f9e0abdba463ed26000fb6bba770d22eeecc
-
SHA256
e481fff62ff9c05d597339c9f977a88b0e87b55d002bc33abdf7474c376f6b48
-
SHA512
fcebfd001a05c1354d906addcd18e3b742187e7e994c7c73f5ce0842e05c3591027beeea3bb7df6508259e459b98db1cbce341c508897c75e9a33eed288fd919
Static task
static1
Behavioral task
behavioral1
Sample
E481FFF62FF9C05D597339C9F977A88B0E87B55D002BC33ABDF7474C376F6B48.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
E481FFF62FF9C05D597339C9F977A88B0E87B55D002BC33ABDF7474C376F6B48.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
E481FFF62FF9C05D597339C9F977A88B0E87B55D002BC33ABDF7474C376F6B48.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://kurutses7.com
Targets
-
-
Target
E481FFF62FF9C05D597339C9F977A88B0E87B55D002BC33ABDF7474C376F6B48.apk
-
Size
1.6MB
-
MD5
24e8cacc70061be05359834dc9dd72bd
-
SHA1
3314f9e0abdba463ed26000fb6bba770d22eeecc
-
SHA256
e481fff62ff9c05d597339c9f977a88b0e87b55d002bc33abdf7474c376f6b48
-
SHA512
fcebfd001a05c1354d906addcd18e3b742187e7e994c7c73f5ce0842e05c3591027beeea3bb7df6508259e459b98db1cbce341c508897c75e9a33eed288fd919
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-