General
-
Target
B8309CBBD739F0AE73CA7B1B6BD6E606E5799FA7F7CD16B70CC1AEB302B63DD2.apk
-
Size
1.3MB
-
Sample
220603-g4lnqsfdej
-
MD5
9573615cd66921cb5f8c63b0e9bb764f
-
SHA1
c0c6c5cddb602bc182f5e8e1fd7a9d3d99cce8f1
-
SHA256
b8309cbbd739f0ae73ca7b1b6bd6e606e5799fa7f7cd16b70cc1aeb302b63dd2
-
SHA512
8cacba7a30c22daba17d03d68616b9746ac4cd68316fb83c6283e34cca52b98278641c970cafa6483789ca58789d3813fb05017bae328e12a5ecf84a9b375b3e
Static task
static1
Behavioral task
behavioral1
Sample
B8309CBBD739F0AE73CA7B1B6BD6E606E5799FA7F7CD16B70CC1AEB302B63DD2.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
B8309CBBD739F0AE73CA7B1B6BD6E606E5799FA7F7CD16B70CC1AEB302B63DD2.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
B8309CBBD739F0AE73CA7B1B6BD6E606E5799FA7F7CD16B70CC1AEB302B63DD2.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://elcamino.top/
Targets
-
-
Target
B8309CBBD739F0AE73CA7B1B6BD6E606E5799FA7F7CD16B70CC1AEB302B63DD2.apk
-
Size
1.3MB
-
MD5
9573615cd66921cb5f8c63b0e9bb764f
-
SHA1
c0c6c5cddb602bc182f5e8e1fd7a9d3d99cce8f1
-
SHA256
b8309cbbd739f0ae73ca7b1b6bd6e606e5799fa7f7cd16b70cc1aeb302b63dd2
-
SHA512
8cacba7a30c22daba17d03d68616b9746ac4cd68316fb83c6283e34cca52b98278641c970cafa6483789ca58789d3813fb05017bae328e12a5ecf84a9b375b3e
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-