Extracted

Extracted

• • Target

    03f03027f6d1f021e845b23cf3a15aea

  • Size

    3.2MB

  • MD5

    03f03027f6d1f021e845b23cf3a15aea

  • SHA1

    76d1fe6ca6ef8bb7f03574c60ec5259c9dfd6bf6

  • SHA256

    7e914e4c0769a7a1dcf7d3a06160bfbd9f7b583695ccc9282854c2946b0321db

  • SHA512

    ba02a72c684203191cc5521d5405c7077739c16a82cb1e1f52dff3ad5bd85d7d62e3bbd156eca02ac81aa89c1ad3dd9167e8994adb0e3f51db3d55c71d0b0ca3

  • SSDEEP

    98304:u8u3g1G0eluSakIJ27zhQQCiJawwTosko1m:03WG0elJaXyz3CBvVko1m

  Score

  10^/10

  alienbotcerberusbankerevasioninfostealerratstealthtrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Cerberus payload

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Checks Android system properties for emulator presence.

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3