Extracted

• • Target

    853f583921fc1750df0ce73c929be81dc7f401f11870e3a7c0e339b76a694742

  • Size

    301KB

  • MD5

    ee5c67d9b6064d6f36e9025b5c142190

  • SHA1

    b4f03e335e0f96100ac3362c9b0dee82437d31ab

  • SHA256

    853f583921fc1750df0ce73c929be81dc7f401f11870e3a7c0e339b76a694742

  • SHA512

    9f5aaebe775f8c2c75947dcf30ff16ee19b5120a331f37b3051847c7f08d9921ba26582c7cdb4bad996ba5457f45545b964b1bad902e445faa6ba921fc1b1463

  • SSDEEP

    6144:BCveehY0824v857BRpFX9mUTiQBy6AKSDdBR1hR28xP/JWi0dR5g3mLlkWAC:dekS7BPh9mUu2ySSxvR2k/PmRoEee

  Score

  10^/10

  alienbotcerberusbankerevasioninfostealerratstealthtrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Requests enabling of the accessibility settings.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3