Analysis
-
max time kernel
3700618s -
max time network
23s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
submitted
08-07-2022 02:41
General
-
Target
4263d3225ea2654a4ca4bce49250b1c74d8795584d90f4a5bc184530d8f0981a.apk
-
Size
322KB
-
MD5
e13254cc9096ca4c5aae7c92055561dc
-
SHA1
ac7328c14c965e018af3e2144f90fc97df41f89e
-
SHA256
4263d3225ea2654a4ca4bce49250b1c74d8795584d90f4a5bc184530d8f0981a
-
SHA512
cb3fa0195181ef8762b42f6dcf50f01370694a12e187c1de04af313fe56093f80b660489e052ebe364ac91ef96b6887f3cc6350ef47c4fc767883fd667c0c181
Score
10/10
Malware Config
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes
-
com.emlxgacivi.yau1⤵
- Makes use of the framework's Accessibility service.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).