General
- Target 7622506120.zip
- Size 1.5MB
- Sample220617-294rqagbf5
- SHA256 7f3d50f12816a9f0ed5873533ca9dab830f54b3d53edc30461fe8ea65c425482
- MD5 4d47fba803fa036bb0b50cd13e925e73
- SHA1 71f75acf9674f4f759e403d5004d2bbb2f47daf7
- SHA512 b5110969870842de97173efc45bf02efea98dc8af3a1c104965ca9968bf5eea6b8a4a05321d034b3e1fe72ecb410eba1079c53608a13dd719f8e983cb3018139
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
3ed22d841a194ccea00d273ac37efb3a09ca553e212e75ab1cf460193adcb7c1.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3ed22d841a194ccea00d273ac37efb3a09ca553e212e75ab1cf460193adcb7c1.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
3ed22d841a194ccea00d273ac37efb3a09ca553e212e75ab1cf460193adcb7c1.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
alienbot
C2
-
http://tramerdesnomates.net
Targets
-
- Target 3ed22d841a194ccea00d273ac37efb3a09ca553e212e75ab1cf460193adcb7c1
- Size 1.6MB
- SHA256 3ed22d841a194ccea00d273ac37efb3a09ca553e212e75ab1cf460193adcb7c1
- MD5 9c06ecd10351906d6cb13a90ddddbc19
- SHA1 4e1112df684edbe1480ef60b02c2fb17ed29023d
- SHA512 a16ec69ac76690d59bc64534388d423c11f9ad06b1184c59dd1eeb7b3ff30d05bdec3d5c5ead1ca94d21b9dd5f9e8bd38e116484eac661ac877113254f96736e
- MD5 SHA1 SHA512
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.