General
-
Target
343453ab84e5d94e21658fd2356f30a7
-
Size
1.6MB
-
Sample
220603-kthe4sdha6
-
MD5
343453ab84e5d94e21658fd2356f30a7
-
SHA1
695508970154b12a34e32246ab2cec05a1d112a0
-
SHA256
2a469268fb18f0b009dc5b2bdd47f9ed61f0a3a2de04ba39daccd08a13fb19b2
-
SHA512
6fa36f56aa8b94a66a8c31c6455b3694aa1b3d04e900459647ee4311f91b604a10918547e784d69731b3b530e247f77787ea3357b63952bdf2fac9edbf7801a5
Static task
static1
Behavioral task
behavioral1
Sample
343453ab84e5d94e21658fd2356f30a7.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
343453ab84e5d94e21658fd2356f30a7.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
343453ab84e5d94e21658fd2356f30a7.apk
Resource
android-x64-arm64-20220310-en
Malware Config
Extracted
alienbot
http://skakkiopiskattkio.info/
http://adkfjsadlkgjasdlkjaslkgjargq0rg.xyz
Targets
-
-
Target
343453ab84e5d94e21658fd2356f30a7
-
Size
1.6MB
-
MD5
343453ab84e5d94e21658fd2356f30a7
-
SHA1
695508970154b12a34e32246ab2cec05a1d112a0
-
SHA256
2a469268fb18f0b009dc5b2bdd47f9ed61f0a3a2de04ba39daccd08a13fb19b2
-
SHA512
6fa36f56aa8b94a66a8c31c6455b3694aa1b3d04e900459647ee4311f91b604a10918547e784d69731b3b530e247f77787ea3357b63952bdf2fac9edbf7801a5
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-