General
-
Target
AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk
-
Size
2.1MB
-
Sample
220603-hbf38abgh8
-
MD5
b144ce370f3442838357a36bec154877
-
SHA1
88cca5b0b6ca6ef5bd0569f5ded4236cf40021b5
-
SHA256
af4be859f940c75bda872242ab47a0d725274002d8a2f0f5c3575512180519f6
-
SHA512
42c43f3d8dc5a734550835e7da2fff32bfff4f426bfd81f7d9767c081948f1f8c82c29ea5366c29c511f4864ce177393cf234e827464463c52d6ade33f0a02ee
Static task
static1
Behavioral task
behavioral1
Sample
AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://akarbvc11.site
Targets
-
-
Target
AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk
-
Size
2.1MB
-
MD5
b144ce370f3442838357a36bec154877
-
SHA1
88cca5b0b6ca6ef5bd0569f5ded4236cf40021b5
-
SHA256
af4be859f940c75bda872242ab47a0d725274002d8a2f0f5c3575512180519f6
-
SHA512
42c43f3d8dc5a734550835e7da2fff32bfff4f426bfd81f7d9767c081948f1f8c82c29ea5366c29c511f4864ce177393cf234e827464463c52d6ade33f0a02ee
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-