General
-
Target
3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk
-
Size
1.8MB
-
Sample
220603-g9k96affgl
-
MD5
2c791cd2cc562ea19b946b2ec6821a8c
-
SHA1
67cf7df79337555fa27118f9a749da843422c315
-
SHA256
3549cea95ec003eed01fdea693f160ec73d2d3c455544557a0c8b98969f1551c
-
SHA512
f938a706ce332104842532e8b0b1867828dd8d6848a01a5bfcc41c4f84a24e766e6dc3504b2c3db8221830bbd051b7aea45ba8eee64bb411446d0ab45d60d5f3
Static task
static1
Behavioral task
behavioral1
Sample
3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://kamuranipisapa12.site
Targets
-
-
Target
3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk
-
Size
1.8MB
-
MD5
2c791cd2cc562ea19b946b2ec6821a8c
-
SHA1
67cf7df79337555fa27118f9a749da843422c315
-
SHA256
3549cea95ec003eed01fdea693f160ec73d2d3c455544557a0c8b98969f1551c
-
SHA512
f938a706ce332104842532e8b0b1867828dd8d6848a01a5bfcc41c4f84a24e766e6dc3504b2c3db8221830bbd051b7aea45ba8eee64bb411446d0ab45d60d5f3
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-