General
- Target E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
- Size 2.0MB
- Sample220603-ghv1aaecbn
- SHA256 e1d863e16d0585609677790971d97a394376e1bb6a96da221719738249669c5a
- MD5 df2cca4519794070ad7671435a3a1e11
- SHA1 e3c369e86eabdba643e0a4c3f34488bc64b11789
- SHA512 d7be25260a822fa98352cd56ca815eaecf2f6d03f7538613f0b9bb2a3cf3022e728db9321000a3ec575cfabb81011e16fe24fcb22026a9a5ad01442f4ae97278
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
alienbot
C2
-
http://kurutses11.com
Targets
-
- Target E1D863E16D0585609677790971D97A394376E1BB6A96DA221719738249669C5A.apk
- Size 2.0MB
- SHA256 e1d863e16d0585609677790971d97a394376e1bb6a96da221719738249669c5a
- MD5 df2cca4519794070ad7671435a3a1e11
- SHA1 e3c369e86eabdba643e0a4c3f34488bc64b11789
- SHA512 d7be25260a822fa98352cd56ca815eaecf2f6d03f7538613f0b9bb2a3cf3022e728db9321000a3ec575cfabb81011e16fe24fcb22026a9a5ad01442f4ae97278
- MD5 SHA1 SHA512
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.