General
-
Target
CC2F8E85E7045473B9C5EF20EF38357C48493F0695A5144CED49D6B221F47557.apk
-
Size
2.1MB
-
Sample
220603-g9qjwaffhk
-
MD5
c9c42e9ef1523105e43c87f05737a503
-
SHA1
1b64cc4fd0f1c31e72c3c51b81aa65780341bf03
-
SHA256
cc2f8e85e7045473b9c5ef20ef38357c48493f0695a5144ced49d6b221f47557
-
SHA512
e8e33b2eaac0dc937ae03bed168cf02c7248b3075358239abe6567aa54110a95442437aa453c95e14f4a579c8c97789ed8fc9e7561a30a48b7c21bb94247f0df
Static task
static1
Behavioral task
behavioral1
Sample
CC2F8E85E7045473B9C5EF20EF38357C48493F0695A5144CED49D6B221F47557.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
CC2F8E85E7045473B9C5EF20EF38357C48493F0695A5144CED49D6B221F47557.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
CC2F8E85E7045473B9C5EF20EF38357C48493F0695A5144CED49D6B221F47557.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://iphone11acces.com
Targets
-
-
Target
CC2F8E85E7045473B9C5EF20EF38357C48493F0695A5144CED49D6B221F47557.apk
-
Size
2.1MB
-
MD5
c9c42e9ef1523105e43c87f05737a503
-
SHA1
1b64cc4fd0f1c31e72c3c51b81aa65780341bf03
-
SHA256
cc2f8e85e7045473b9c5ef20ef38357c48493f0695a5144ced49d6b221f47557
-
SHA512
e8e33b2eaac0dc937ae03bed168cf02c7248b3075358239abe6567aa54110a95442437aa453c95e14f4a579c8c97789ed8fc9e7561a30a48b7c21bb94247f0df
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-