General
-
Target
b6d15d3db7993509dd52acace8442d83.apk
-
Size
1.7MB
-
Sample
230313-vr5gzabd28
-
MD5
b6d15d3db7993509dd52acace8442d83
-
SHA1
ffa472c3bea67ba551057ec5cd464cf0fc85c302
-
SHA256
65857c176c0861d6a36d6f363c5eac29377f354186c9a093d024a41c2a593a2a
-
SHA512
83e3068b0108f0f95c58ad1030b68b5f32e65efa9cc3c7b37062a9442b10e2b2d464bd18697f138466e5beb50f2133010eb569106e523ed6e9b494376018ad96
-
SSDEEP
49152:U3KajslnGwhC7Yi5ZP4SqMH+zOS8DjjM+gDeiSD9Y0fhdm:U3ZjsdNkYi5ZwPzOSZDDOfhdm
Static task
static1
Behavioral task
behavioral1
Sample
b6d15d3db7993509dd52acace8442d83.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
b6d15d3db7993509dd52acace8442d83.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
b6d15d3db7993509dd52acace8442d83.apk
Resource
android-x64-arm64-20220823-en
Malware Config
Extracted
alienbot
http://malboratacbl.com
Targets
-
-
Target
b6d15d3db7993509dd52acace8442d83.apk
-
Size
1.7MB
-
MD5
b6d15d3db7993509dd52acace8442d83
-
SHA1
ffa472c3bea67ba551057ec5cd464cf0fc85c302
-
SHA256
65857c176c0861d6a36d6f363c5eac29377f354186c9a093d024a41c2a593a2a
-
SHA512
83e3068b0108f0f95c58ad1030b68b5f32e65efa9cc3c7b37062a9442b10e2b2d464bd18697f138466e5beb50f2133010eb569106e523ed6e9b494376018ad96
-
SSDEEP
49152:U3KajslnGwhC7Yi5ZP4SqMH+zOS8DjjM+gDeiSD9Y0fhdm:U3ZjsdNkYi5ZwPzOSZDDOfhdm
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-