Extracted

• • Target

    43f7de64b8026fa16a4e0b74a9a3d1c879db3098c9780ac202fc2113a5577c48.bin

  • Size

    4.3MB

  • MD5

    5821d41b75a741cbf411f02eba9e85df

  • SHA1

    6cfc9e0fe629d884e23a40247dfd040f47c511eb

  • SHA256

    43f7de64b8026fa16a4e0b74a9a3d1c879db3098c9780ac202fc2113a5577c48

  • SHA512

    ba1edb32d7d65bf6ddb7b6da2553e5898167c5bd4671c1e5da0eab7cdf873a1e018450a4a62a3dbc35aa70e9236c63a36b6b8b103474552b89ff726355acfe4f

  • SSDEEP

    98304:P2HJ6clSJ5WC2SX/Kpym5SBzvq/h/P9/GKJRyHjVmMkfbh1mMXyZYv+Afez8E:+pFZ1cm5SuTexZk91DgYWp

  Score

  10^/10

  alienbotbankerevasioninfostealerstealthtrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Makes use of the framework's Accessibility service.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Acquires the wake lock.

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Removes a system notification.

    evasion
  behavioral1

• • Target

    howtouse.html

  • Size

    3KB

  • MD5

    86805cb74330bdade0fd1514b786f3fe

  • SHA1

    026956ef40c0b13b02d04b62dde855cdcf8320c8

  • SHA256

    b52df83dd6bc09432285fb4d7eba48e00fcb70514a10265369de0d4e082fd1ac

  • SHA512

    53c2f9fb2a62bdffa43947bd6c40d1ee611fdba4f31ed206f9016eb1c22181644d71fe5a71cc6334f6cc2f6b41746dd2f663e0e9d5e6835f5ea5a0aaee70bf84

  Score

  1^/10
  behavioral2

• • Target

    index.html

  • Size

    6KB

  • MD5

    632f5c8db0e3e45aefe3efb1be66c2be

  • SHA1

    d315a8af3da5760e05fa953b81c68ee2ad43e574

  • SHA256

    2cf0d62d66de6433c28885c2fc9891be97c8d447b75624336452d0f2c1caef17

  • SHA512

    87b200ba5da65a188e7f6364eadd4346486d196d806538f901eb7665392d8d0a171965f08d80a853e9d04c1d1b13c91010f660c45204f3abd52ee60ef5c1283b

  • SSDEEP

    96:LbHPSrwSqASLSTSTStsAaodAb4dbtug6maUXLAef5STSTSvSoSGMSTSTSU:Lzarpq2eetLgsRAg6kXkefoee6hGFeeU

  Score

  1^/10
  behavioral3

• • Target

    index.js

  • Size

    2KB

  • MD5

    164c20542114d98c874714b7d9b30797

  • SHA1

    0d2a0f0b62f2411e5eaf925edad2cb2114bd990d

  • SHA256

    0cae8c147d7db59fa42386d944b168e4cde4957472ee1f3e3b233bab33bba35a

  • SHA512

    ec3648dea3d04032404214a32a68ea94c85725f8c2736a3c96d4cdd1031158a3ca786bcb98bbbcc4a404c5e8fcd11b07ed9431568347696b823a924947f8cb30

  Score

  1^/10
  behavioral4

• • Target

    init.js

  • Size

    4KB

  • MD5

    d5fe00415537af647c96fb15d1a68862

  • SHA1

    9801b69f33ff5abb3a4956bc462abee63df603ec

  • SHA256

    0d2ada790267b28f910fb6192007ed3db94c7e9e07c951fc04a5465d839da62b

  • SHA512

    09753a3d1046ef889080d56818837c9f632eea26f8b2799d31716b583a5c950f3d324a2f2aa6f3c9264a744d5f45365b3d2c37874f4d06b2307e213b014ff040

  • SSDEEP

    48:Na9eZVZDTD5E+gL00egDzATO0W1+jOe1E7Ckp5aBotjAJRbTLnLLRL5Gn54B53cf:NamTHDfVO1laBKjUjHneQtcRd

  Score

  1^/10
  behavioral5

• • Target

    init_2.js

  • Size

    3KB

  • MD5

    93116f07ef03382f59ec0654c6d2a537

  • SHA1

    cba77b46a91694f88ce5ddc02d4cba04a1753a9c

  • SHA256

    d1e1a4d84c694408ae5342a1d6a45641516bc9a9f75aee186a3c2acf9d182409

  • SHA512

    df849c82821dcbffde5b518f50c70f507a873285bb08c212fb9d19441089c420b786e3b46ef633279774855b7aedf1458979391b629cfde323284d16fcb50bb4

  Score

  1^/10
  behavioral6

• • Target

    int_culture.js

  • Size

    3KB

  • MD5

    cefc31743795ecb7899a47e372062271

  • SHA1

    0d1ec79bff68ddc587899bf7787d15add91ac45b

  • SHA256

    5cb6297b87a239190caddc14a911b945a4b3a839d83a43bf2f9b0eeb3fa9700d

  • SHA512

    548218abec9751efee67d3dbd1f43099eb2502fc1cf5b6549e450fbe4389ed037f8b08d0777a658055b097949f447513202c3ebb734ea1715b176cec44336cfa

  Score

  1^/10
  behavioral7

• • Target

    liblogger.so

  • Size

    17KB

  • MD5

    4f4f43041031d57d7223f28f5a961c6b

  • SHA1

    18e99de4a0a0d2f88d7338117cd6311c1888fd39

  • SHA256

    3c561bfa1b6cdc685b6b023120e85ce86c042f66dd571385a7452816fd7843a7

  • SHA512

    b077f3c738bb602229c97c4a07734d89c4cbc3335842cc3b940b7498814ef3d0c625544bf0dc82f2fb97c736897e9b82cc27eb36312aa9291efa904b74509499

  • SSDEEP

    192:CSOD6GHzC6XujfWdoXOPaprA2xy1OlRdqJxYjpjM560NQqe3C83kEgh+zU9kv:CFHzCuubWdoG8r5yUndqzYNA5VQxW

  Score

  1^/10
  behavioral8

• • Target

    libnative-filters.so

  • Size

    13KB

  • MD5

    b5cea7827087b37a8216426a39e00d37

  • SHA1

    de5b799b8a35366434b2638f45cd0ef8dd62b1c0

  • SHA256

    8bf51d74e79e254b6e43ada5df3956f3a2f2898619fed7ea22f6dcee72608060

  • SHA512

    3d646412abbe75ec9b2ad838f711f876d838829e82a21401063e78dd50f4e0359552ba8a9aae708b220cab13867c266b9eee0d2dfcd754b5abe8221ee08ece3e

  • SSDEEP

    192:CT7cNx+J9iUdgF5272U2vN1lIvw7VpKkZN9cqMPu6tMqiZvhwkDlcjd06666666v:k9v2l9VHmIKkf5L6+i8lL

  Score

  1^/10
  behavioral9

• • Target

    libreact_config.so

  • Size

    17KB

  • MD5

    920b7f31d2c23ca8f110b8ca456f4c4e

  • SHA1

    2ce139a55cadbf7647d07f7b71ab33ecc2635f5a

  • SHA256

    b3574e2e52a479a36fc9ed4e4490accd5d31f24d9ba02128944b21b0a401f958

  • SHA512

    147cb7a1383032f44c127df122ca90eb6a2d2b5db2638e90f596237ce30f867c5dd3974922c96d62aa3fe3908f2020a673d3b278f40f62a965d4487c549e4a16

  • SSDEEP

    192:+wWPFSvdFgiydrAL1iOlRdNxYjpj7tHHNQqe3C83kEgh+zBLrK:+wWPFKdFgzdrY1lndfYNFNQx

  Score

  1^/10
  behavioral10

• • Target

    libreact_utils.so

  • Size

    13KB

  • MD5

    6ba271a2ee08ef88411961fe887582f5

  • SHA1

    f01380a693fea7412de03383d130193e4ed2bec6

  • SHA256

    5807798ef7087379782d1c2606eda9b78eae779cbe8abc32175cdcd8b4e361b0

  • SHA512

    5bc2d9d9dc11df98440d03ec7dbb6166d7bbbee0437435f05fa6b7cac62c26cf33542daabdf8cfe6812f73c2af124ef8e20670aae3e62245790288035b184c99

  • SSDEEP

    192:wc8XqmUd2ErtrAbjEnXeOlRdLxYjpjAv4RhNQqe3C83kEgh+z2mDZ:wc8Md24trEEn5ndtYNkvIQx

  Score

  1^/10
  behavioral11

• • Target

    nativeapiprovider.js

  • Size

    1KB

  • MD5

    e57fd7d1074822cd0fa72aa9a42e5297

  • SHA1

    87d0075c461dded59c3f8c7a16e67fd944336630

  • SHA256

    5755538135ceab65896ddbd773a7e7044f32a660de61d43346d4aa4e4389da55

  • SHA512

    e46c0723ea418266dcdfb82ad13030ce3d345c4ddd86c867edf9ae229ea590fedbeedbcdf3536255fbcd70b83abe1587df305cb74bf9fe7f2128dd0e4ebce865

  Score

  1^/10
  behavioral12

• • Target

    not.html

  • Size

    2KB

  • MD5

    52739f2a743d7ff83830e29a809afaa4

  • SHA1

    293097e40de1d2ad87481ed4462fbb1a37af442a

  • SHA256

    c65bc5a6428df5e6e0a1c5b8698a9cb3e609f4a40acfb1fbca55fb17d4e7420e

  • SHA512

    c38df8376c328e2c41e326da0ddf88c797dd8c282654fad2a93bd39c34be0d51553bf7353f1b8f5e305e3266a967bff5494d5bb7a1fa7ed4ecd90ef0bac6569e

  Score

  1^/10
  behavioral13

• • Target

    platform.js

  • Size

    4KB

  • MD5

    9c36fb90a0a9326fef4ef032d52d2c21

  • SHA1

    7de1123aaaa7fe470537a27ee17cc7052de5a473

  • SHA256

    3a1404a82bc95c66d86a0459a0fe65643be019b5d00bef7c2bf53e55018e0451

  • SHA512

    f40464caafe41c2a01bde4116f3f8d02eb365b3feaf5bd4c71b99082da62da2446bfad6516116e3e6ed245f451d9cf7353000c4d0d2b5b365d838ce2b8806799

  • SSDEEP

    96:hQ0N7B/dHfiWSyQA/MgtOp2lstJ4+VOH6U2kLJCPZWIF:z7NdHVbZp/6VoIF

  Score

  1^/10
  behavioral14

• • Target

    popover.js

  • Size

    4KB

  • MD5

    62d272c1541dfcbb270f54987751abda

  • SHA1

    50224c3f47ae01904004cf510e6712021d5d01e2

  • SHA256

    6cb0342bf22f4e520eb6bf5ae83036df3801011f223acbcf42aa6622ae888a51

  • SHA512

    2b1d29f31cf3c9ef886144f64a75eaaba9a0d2c416a1b37d62069f643697d71a78690ce3642593b2a885a2d30811f39133b3dcf570dc8cc2726c47e152a95df0

  • SSDEEP

    96:7GTivcVcfDZll5K3fimkkFjOOjRlZLuMOtV1t9VmOLkRzuv:JuQZlHrTkFjOOjHZLudf+CkRzM

  Score

  1^/10
  behavioral15

• • Target

    postcss.config.js

  • Size

    238B

  • MD5

    315e0251cca1291b7f01f9c33b6736ce

  • SHA1

    4ac53c8f3d53edb8e465b74c2798e69cb1c4a21f

  • SHA256

    f1431c3069f21c41677db7b824057ff241f8bbd3760842861b5d64a49c839eb6

  • SHA512

    4b567e6fa6a5f010ce7f4e91c8652f37c79bc0f86c52579deb526087bc7f62a5e507352d519dbbbc83494806306fa426083334fcb72e83f360270daf9acdd08a

  Score

  1^/10
  behavioral16

• • Target

    premium.html

  • Size

    1KB

  • MD5

    2051ca49792d77c5ffa633c1ab14c364

  • SHA1

    e6deb7ff91a482c2aae6a72c497013d9f23abbbe

  • SHA256

    db881724343f9a39ada147d6b2564384015e09c0c4a073e5b49a74ccb8dfd231

  • SHA512

    360e0245528c9fb94ae71fc3a56dcc15e64e26497e7d9ce55b1aa37d9784305e3d62df2ae08dedd8fed05d25da60d52007aee4a829440fbf31c8b9489becba21

  Score

  1^/10
  behavioral17

• • Target

    promptbasednativeapi.js

  • Size

    1KB

  • MD5

    966e66968f22e991ff44bcf9e22e6a06

  • SHA1

    340d92e2b57a2d6db2d529699bfcb71051865dc9

  • SHA256

    eaacd9b5acc002d5e96919cfeb27032c007aa83e452263929101aee71f66b895

  • SHA512

    4fb8fa15e8d8c5706bb89a3cf4200795b626625761528dd7d3f6d80fc46bba75609bdda4f91187439628f33ebcc648e7ea8f53af27e4b7f1bc137acfc42db206

  Score

  1^/10
  behavioral18

• • Target

    pronunciation.html

  • Size

    10KB

  • MD5

    1f86c6ae1cde44bd476faa8e853120f8

  • SHA1

    f34385070bd3dd071a6c56cfd7be69abcd66b656

  • SHA256

    1bbd2b5923eaaabaecb8a74581cadd09e89ce61cd428ef4fb73afcb1c7659705

  • SHA512

    a04a7605c8ea22253589a9efd10ed9e2d47f3066c744d4830632115a7a36e5dabbee80ccfc8d2fcaa77e83a7503a478df3fbcbbca024fef7466e8dedb438b5ed

  • SSDEEP

    48:6YPHLj0FGw2ru3ZPqOcfJxmgH2rut2tmvs7I83HdWB2J2om:Lrw/4upPqOcfJH4uUtuss2/J2J

  Score

  1^/10
  behavioral19

• • Target

    rollup.config.js

  • Size

    1KB

  • MD5

    581ef98a43f03f2f077cd57fd35f65b8

  • SHA1

    523c3af7bf58ceae0be42f2a2cba6ad2fb43a787

  • SHA256

    839f472e61252fe128cb2c0ffd1754b2657606abfa231b5425df38e8893a93b3

  • SHA512

    b8402273a233df92694fba60e39d60e9519bff8f7110a744a475792a770430016e5c1ea5eb85d1117604375b94d5bf7558c103c4d6f3d45315887cbf9595e26f

  Score

  1^/10
  behavioral20

• • Target

    sandbox.lua

  • Size

    4KB

  • MD5

    39269f9ebe63a085c2b2f69dd83064b8

  • SHA1

    650694516748744ef54714502b05c3e66dc91ea0

  • SHA256

    d829504dd8769dcfc8cfd40d3611ff7041a79140efcd133409142a0803dd1fc2

  • SHA512

    e57d5fc25fe980074c8c86848fe70464fd2d549496bd13de287b9313adb16cc49d0b39a640b1e3061be5c31585a0a6dfc7f7c46d22e2a4b3dcfaa621a675c7da

  • SSDEEP

    96:VNrnJOoMY54sRqpPi1QJP4W0iAdT4Z0EVu4iiV0Ps:VRnJ3M7mqJi1QJQW+dT4Z0Z4iiGPs

  Score

  1^/10
  behavioral21

• • Target

    sanitizer.js

  • Size

    3KB

  • MD5

    5b53bc28aeb4c5a4aa46017d529b1aeb

  • SHA1

    168cb26f736b4cd7caad15150a0726550db9c770

  • SHA256

    c8f900d750c6e7991c6e2c013104d3a59b3a24a726f2501366054a9423ba393f

  • SHA512

    fcc91f8de9400a79ee0ccfe1cbb8455aa4cf5060f696b888fd7fdadf8d11f69bcd2b6a7878f4beebe046e122c229448cf2e4b8169711b5091d75709f1d0beb10

  Score

  1^/10
  behavioral22

• • Target

    scrollspy.js

  • Size

    8KB

  • MD5

    45aa7777f626541ee6d6072a570910d7

  • SHA1

    b1b69b6f1562e6ed41383bced93ef06f11c42ff4

  • SHA256

    63175cef1f2e045864a0b29c9332fac7bfca1094f5a3c1b706869f897880e99f

  • SHA512

    00ada6609683de39f4767469b98d70e3ce5e4efe7a16c5b23f7275b7bcf75fc13f21ca2cbe66fd3a2eff43b482d6952b007ade07fbb02e0e9e486eb75a366b7d

  • SSDEEP

    192:x55PgMThmHIT5gdai0yvVV7lUuJcj/OgT04gz1KxM9kRztkG:x55PgMT0HAgdnZlXhzMAG

  Score

  1^/10
  behavioral23

• • Target

    ship.sh

  • Size

    1KB

  • MD5

    ab1e1ee5821bd9d9e45b1339ec1d325d

  • SHA1

    bbf3dcc4f48e960930ca21db4a86ac2fb929d8a3

  • SHA256

    704d83fab6408378bc139211fce6adf56fd173cdfb8b2e6c1f64511ddc0c3e6a

  • SHA512

    932a4ae7bb54ed437904edd21a51c1a744eddfed022299de71950f89162f4f15d69a9f2d45f05b23fb9bc19faf0330102624947ebaaf300bdc95835fca174c0c

  Score

  1^/10
  behavioral24

• • Target

    store-android.js

  • Size

    87KB

  • MD5

    aa308b184cedb16c33cca65ffbf2e9aa

  • SHA1

    73ba682b2ca572fd6232bb84091a8a0f5ce2d594

  • SHA256

    4830a34d0ec78b43cc56b0bc701b877f50888c0bcd63bbc96f1189acbc42de1e

  • SHA512

    5a414d69fa94036f657666c2065fd3b637a08c4d4918bff54508d7e4787a07ad81c91b22878622817c3dad7042814e9568edf73665a7c59933c522a3c5323936

  • SSDEEP

    1536:Jb3qv+tJIwHM3TVOAt65rmR4owCKWNBuIRg+CxG9hK+Mg2QiWQ/0RYJMfTErjf6:Nqv+fGTa5rm2BWvRiQ9NN2+

  Score

  1^/10
  behavioral25

• • Target

    t.html

  • Size

    574B

  • MD5

    c72c9c6455b69b008290939fd4e9f20d

  • SHA1

    5bc81b2b48c049effced52715b6b87294af9d092

  • SHA256

    45e4d4ce38b80eaf4b58050b50c371841992adf5feeb815c2628d909ba5d0635

  • SHA512

    ac795c14ba2d2a4fee59f71cf378f9b9c2f252ca4a7f55b0567ecc1c738d719d19418824451fc2db44fcbbad1718400a43e91d3aff1a7f3710c4b3d6452c42e9

  Score

  1^/10
  behavioral26

• • Target

    tab.js

  • Size

    6KB

  • MD5

    8aecf0e669b1cebbd786560b3b7cfc08

  • SHA1

    7f515a95b0fc412962cbf25874c6d4b75670d12f

  • SHA256

    06dc3e80d88d0ebba545a5f9fc9207479a1c2aaab7515da3166e1900ac474fec

  • SHA512

    0b0c8cdffc81d442635df5c3b625ed0b6ac0b665173af7900f9337d707c1653217f3e2d478f11528b3f9a2eb46945603ce9e17395e8c23e264faf532d8ba0c83

  • SSDEEP

    96:h+NDlpYsim3hFtJFIfML9RySruomeR4J9CWww7ikRzf3t:UXYz2FtJyy3SomeSw3kRzl

  Score

  1^/10
  behavioral27

• • Target

    toast.js

  • Size

    5KB

  • MD5

    314509c1bc7b99a2fd59a00a87953c0c

  • SHA1

    e677e73e90afc987b793e40603436447b7a5c3b0

  • SHA256

    888ab81a0a125b2bc8986168030dfecb58f870b7d7a87ef3829a2d1b1f783ed0

  • SHA512

    c8dcbb4220965662d6f93ef508442f9be55b635960ba345c5e4fc263e1d873a526695e25347cd5b2833fdeb7b4d9c514dd7ae27429066d641837398220e72c34

  • SSDEEP

    96:x+h0ljc/7YWimwlifmiRSIa57LVlJlz/SaIQYkc8Qb9:9NcTY1bifmiKNVlrzJCkJa

  Score

  1^/10
  behavioral28

• • Target

    util.js

  • Size

    5KB

  • MD5

    1bc5c05ceac6e804113969451320458b

  • SHA1

    91a3e2f89aa32016ca8f1efee3e511d633db7239

  • SHA256

    2f7574d8e21513edb5cf0b641aad6b19f5c71caf6041c96476322d82ff22b0ba

  • SHA512

    a5e5f829d3c5b89c9b3ab04c86564b33785e43180e742885ff06c5d7eaf4af43420bf7dd570e53afad7a3d03ddcbd31eb04e383cb586c4676fd649810e2fa4bd

  • SSDEEP

    96:3yXyQvwhhb/VWyNQvpOJgrlyf2Nb8WNPkaTguEQ/5/KGo7c8KD+:iCd5OvkJgrle2Nb8OkaTp5/xA1KC

  Score

  1^/10
  behavioral29

• • Target

    vnu-jar.js

  • Size

    2KB

  • MD5

    a90dddfaafb6cf87b239d55fdd6fc455

  • SHA1

    467c0764283589df7d3b40c7c14505aaf3ed55c0

  • SHA256

    9241a0d086d23f1cd80f4b397d211fd671f5368706a4789e6cafdb5ce19f2d9d

  • SHA512

    85a7afebdf8e7dda0635ad9990f0d0ab626abe9fc27189b04de1593439cf53f5a27a3a3fae31d740b51c5ea3a74b2a4010ee3901ab52cbab2a45fe9bf12c32f5

  Score

  1^/10
  behavioral30

• • Target

    voice.html

  • Size

    12KB

  • MD5

    0d3bc87864ff065a7544cd6e18d1e335

  • SHA1

    63042d314ab0b4beba084c216c2d26c398242cb8

  • SHA256

    b23ada8472bb8ffd5b2a5c0aad3bb3ef7fac35d349dbe4e0951d27aaedf6a341

  • SHA512

    6450bc90d2da886d2f064769a78551cc7c66133fa991d027f10514a722051621c8a19b002cc61536f99af466882df78cf9833424523cf805a6482210d40fe41f

  • SSDEEP

    96:PlizHJoMTPMU5YQHQv4MSEm7/IDvVynACBxRJzTiOPlDgeg4CaPSPSbPSPSB7:s5O4LQDEnAcJzjlMp4SPSjSPSN

  Score

  1^/10
  behavioral31

• • Target

    voice_2.html

  • Size

    12KB

  • MD5

    89ed7fecedadce70343d2150ab474b3d

  • SHA1

    c2077b9ba5a6a568ad5b6ff6110135e5ba6e949f

  • SHA256

    fa2e1a7764759661211d08a6e593934ecfb757078fa7f94cc2ed54f006ca34b9

  • SHA512

    21fb2beaf362ba1beafe0579ca7db9d669ed3f05436712003a27396779744970f5d73f07b3dc0d418a2738e6f90f675383f14120dc3533993e261e7fadca0539

  • SSDEEP

    96:1liz/zJoMTPMU5YQHQ74MSEm7/IDvVynACBxRJzTiOPlDgeg4CaPSPSbPSPSn7:ajpS4LQDEnAcJzjlMp4SPSjSPS7

  Score

  1^/10
  behavioral32