Resubmissions
27-03-2023 09:59
230327-l1fqjaeh6s 10General
-
Target
manager.apk
-
Size
1.7MB
-
Sample
230327-l1fqjaeh6s
-
MD5
a6f135cf0459e5c4432b16d2d34d0279
-
SHA1
b2a7f327437e5cc42d05dfb3fd4029a8ad0af44e
-
SHA256
dc9ca870cd4df91ab1291d28ee658838dc83aeba0cbcd4db43c117aaa251260e
-
SHA512
867113ba6d579fe4dae4e77196abc058f2fc6a1f4649a7e6dc3bf417e9843d6aafd07bb77f35d6ed0722d786a41d89a5bd045ab6ae877c50312ac6d91e563f64
-
SSDEEP
49152:7lEm4m0cDWuWArTqqsw84uT5vH+zOS89ljo+g1e4S19YifhK:7lEmZ0c6uWArxk4S5GzOSND18fhK
Static task
static1
Behavioral task
behavioral1
Sample
manager.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
manager.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
manager.apk
Resource
android-x64-arm64-20220823-en
Malware Config
Extracted
alienbot
http://164.90.178.90
Targets
-
-
Target
manager.apk
-
Size
1.7MB
-
MD5
a6f135cf0459e5c4432b16d2d34d0279
-
SHA1
b2a7f327437e5cc42d05dfb3fd4029a8ad0af44e
-
SHA256
dc9ca870cd4df91ab1291d28ee658838dc83aeba0cbcd4db43c117aaa251260e
-
SHA512
867113ba6d579fe4dae4e77196abc058f2fc6a1f4649a7e6dc3bf417e9843d6aafd07bb77f35d6ed0722d786a41d89a5bd045ab6ae877c50312ac6d91e563f64
-
SSDEEP
49152:7lEm4m0cDWuWArTqqsw84uT5vH+zOS89ljo+g1e4S19YifhK:7lEmZ0c6uWArxk4S5GzOSND18fhK
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Removes a system notification.
-