General
-
Target
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
-
Size
306KB
-
Sample
220602-ndsgxsbafr
-
MD5
63c10ff97b867eade1b841963801b662
-
SHA1
33062f6c1bcc468bf4a51296b8eeb08fb1a2a03e
-
SHA256
486afd2192aa17f4e95da012b549ab70cf2d250a6e7a12210010a6c413c7e2ae
-
SHA512
ec73125fea196e2360472e9f7789ba613638ed35780bfc8c697e02037293f96b1f91000693d6a91a4946997c9d6ae883e99486c46ab31bde43775cb7191d66cd
Static task
static1
Behavioral task
behavioral1
Sample
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://zesasar8.com
Targets
-
-
Target
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
-
Size
306KB
-
MD5
63c10ff97b867eade1b841963801b662
-
SHA1
33062f6c1bcc468bf4a51296b8eeb08fb1a2a03e
-
SHA256
486afd2192aa17f4e95da012b549ab70cf2d250a6e7a12210010a6c413c7e2ae
-
SHA512
ec73125fea196e2360472e9f7789ba613638ed35780bfc8c697e02037293f96b1f91000693d6a91a4946997c9d6ae883e99486c46ab31bde43775cb7191d66cd
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Removes a system notification.
-