General
-
Target
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
-
Size
456KB
-
Sample
220602-nddnrsbafj
-
MD5
b72c6108be79544049a01a1e35769f9d
-
SHA1
8e32645c945c37fe68d42dd439a65dc6efae8e5f
-
SHA256
98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
-
SHA512
383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
Static task
static1
Behavioral task
behavioral1
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://kremmilk.xyz
Targets
-
-
Target
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
-
Size
456KB
-
MD5
b72c6108be79544049a01a1e35769f9d
-
SHA1
8e32645c945c37fe68d42dd439a65dc6efae8e5f
-
SHA256
98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
-
SHA512
383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Removes a system notification.
-