General
-
Target
872EBBA0DFE0A28DA3E91B0EE4D6DF32
-
Size
1.6MB
-
Sample
220627-l79l7acca5
-
MD5
872ebba0dfe0a28da3e91b0ee4d6df32
-
SHA1
6a87c50179b08740bcab9da69a869d7c881f40c4
-
SHA256
9832b1ade1907849fd7091e85f2c24bd8a4488ecd96f0638fc979d8858b25196
-
SHA512
e29e0f2b36fa161569e0b38a9e0c22365a041432ee9e84083b39aa510247dd5ffea324627d5e5ae30fd538b10ea6f7a6a7ba6dddb635284a12097dc4a6333604
Static task
static1
Behavioral task
behavioral1
Sample
872EBBA0DFE0A28DA3E91B0EE4D6DF32.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
872EBBA0DFE0A28DA3E91B0EE4D6DF32.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
872EBBA0DFE0A28DA3E91B0EE4D6DF32.apk
Resource
android-x64-arm64-20220621-en
Malware Config
Extracted
alienbot
http://botduke1.ug
Targets
-
-
Target
872EBBA0DFE0A28DA3E91B0EE4D6DF32
-
Size
1.6MB
-
MD5
872ebba0dfe0a28da3e91b0ee4d6df32
-
SHA1
6a87c50179b08740bcab9da69a869d7c881f40c4
-
SHA256
9832b1ade1907849fd7091e85f2c24bd8a4488ecd96f0638fc979d8858b25196
-
SHA512
e29e0f2b36fa161569e0b38a9e0c22365a041432ee9e84083b39aa510247dd5ffea324627d5e5ae30fd538b10ea6f7a6a7ba6dddb635284a12097dc4a6333604
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-