General
-
Target
32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk
-
Size
1.8MB
-
Sample
220603-g78yfaffbq
-
MD5
e07dd64ed4031f2335f378c3c8a92ad4
-
SHA1
b5a40dcc077c4fe6c6b124a11d429d6fbd403184
-
SHA256
32376baf8d01ab49e8a4b35ec35bc27fab99b66bcefcb160a7878e724d68bc3d
-
SHA512
25f3e93d5f4508549600e8da98d124431efc97f80101bf888100c9722beae4d025b77a8af93d75cd1091030e0ad81d46e3d6eb6b306328686f2122ff10aeccc3
Static task
static1
Behavioral task
behavioral1
Sample
32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://cacecarsa4.com
Targets
-
-
Target
32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk
-
Size
1.8MB
-
MD5
e07dd64ed4031f2335f378c3c8a92ad4
-
SHA1
b5a40dcc077c4fe6c6b124a11d429d6fbd403184
-
SHA256
32376baf8d01ab49e8a4b35ec35bc27fab99b66bcefcb160a7878e724d68bc3d
-
SHA512
25f3e93d5f4508549600e8da98d124431efc97f80101bf888100c9722beae4d025b77a8af93d75cd1091030e0ad81d46e3d6eb6b306328686f2122ff10aeccc3
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-