General
-
Target
8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk
-
Size
2.1MB
-
Sample
220602-njhjxaffd4
-
MD5
c4a118a1dd6dd7182329449cf4faa60a
-
SHA1
a36de5592e735ee578c24aedd0883e72c8eb95a5
-
SHA256
8c8806de862133ede2eddd2a82751af95eb39e0dd732478cc70baa5bb2d6ebdf
-
SHA512
77ade4851913d397ea238f60e42c7cdcbcadfc44ad67c6bdb805bf83e2b6146785a368f79ed8226489d86d0074fc5bd36c769f6ab2c87a21ec28a77a9f888ef4
Static task
static1
Behavioral task
behavioral1
Sample
8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://oylebibokabattimben.com
Targets
-
-
Target
8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk
-
Size
2.1MB
-
MD5
c4a118a1dd6dd7182329449cf4faa60a
-
SHA1
a36de5592e735ee578c24aedd0883e72c8eb95a5
-
SHA256
8c8806de862133ede2eddd2a82751af95eb39e0dd732478cc70baa5bb2d6ebdf
-
SHA512
77ade4851913d397ea238f60e42c7cdcbcadfc44ad67c6bdb805bf83e2b6146785a368f79ed8226489d86d0074fc5bd36c769f6ab2c87a21ec28a77a9f888ef4
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-