General
-
Target
05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk
-
Size
2.4MB
-
Sample
220602-nh27xsffc5
-
MD5
ff8585c2fde047bf8ae5c96093ef6eaa
-
SHA1
ce736f02647c6527de72d0efe6693921a79d5b19
-
SHA256
05da8e7de864574f02b5d59fdc678e43ddb3a68b30cea06768323072c38ebeab
-
SHA512
1a2d23aa0ce2a511781d787378d3540185518b9ac49c1e63aaab53e390b26d39fbd36fd7b2e510f27cc08ff7a898c4b163bd3945c06b3ed61d1c2db9477efd50
Static task
static1
Behavioral task
behavioral1
Sample
05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://ukalasey5.com
Targets
-
-
Target
05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk
-
Size
2.4MB
-
MD5
ff8585c2fde047bf8ae5c96093ef6eaa
-
SHA1
ce736f02647c6527de72d0efe6693921a79d5b19
-
SHA256
05da8e7de864574f02b5d59fdc678e43ddb3a68b30cea06768323072c38ebeab
-
SHA512
1a2d23aa0ce2a511781d787378d3540185518b9ac49c1e63aaab53e390b26d39fbd36fd7b2e510f27cc08ff7a898c4b163bd3945c06b3ed61d1c2db9477efd50
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-