General
-
Target
68807B45C752F41989F19651AD1A5E55ADDD57C8420DF5C39D2B59A577123A65.apk
-
Size
1.8MB
-
Sample
220602-nkcp2sbbgn
-
MD5
0540a0998b2c3f0395b192a42a1cbc7e
-
SHA1
4c9ff01441aace76582d355acb6b219762c2bab3
-
SHA256
68807b45c752f41989f19651ad1a5e55addd57c8420df5c39d2b59a577123a65
-
SHA512
f048a77ed41465cf65c8345e6a66a78503ce0ffb0cda13d0a90658ecb8461179f37c19fb352e3ac2d5b015704210f0b10576847d8ce3f632f551bc22956c5893
Static task
static1
Behavioral task
behavioral1
Sample
68807B45C752F41989F19651AD1A5E55ADDD57C8420DF5C39D2B59A577123A65.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
68807B45C752F41989F19651AD1A5E55ADDD57C8420DF5C39D2B59A577123A65.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
68807B45C752F41989F19651AD1A5E55ADDD57C8420DF5C39D2B59A577123A65.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://cacecarsa5.com
Targets
-
-
Target
68807B45C752F41989F19651AD1A5E55ADDD57C8420DF5C39D2B59A577123A65.apk
-
Size
1.8MB
-
MD5
0540a0998b2c3f0395b192a42a1cbc7e
-
SHA1
4c9ff01441aace76582d355acb6b219762c2bab3
-
SHA256
68807b45c752f41989f19651ad1a5e55addd57c8420df5c39d2b59a577123a65
-
SHA512
f048a77ed41465cf65c8345e6a66a78503ce0ffb0cda13d0a90658ecb8461179f37c19fb352e3ac2d5b015704210f0b10576847d8ce3f632f551bc22956c5893
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-