Extracted

• • Target

    0da3fc66004320774a0ff35d239b3aca

  • Size

    281KB

  • MD5

    0da3fc66004320774a0ff35d239b3aca

  • SHA1

    6c514307ee8791903f48938983bfafb616fa8a88

  • SHA256

    a92cc791f8e9f6cd619ce76033a62c10e8954310e8791b5fa581a806b8ab898c

  • SHA512

    1460f012d213002407622032a8dd36c98a6bacfd5194bc5d0d0b4f5dbdb98acab06696fd6e4d4147d784cab8924d55df7eaeb3134b0042572b2985361ea6840c

  • SSDEEP

    6144:ylYXB3P9Em35L0JGiDWaYjtIR+UzvQNaAff0fEOmNdF2pW1s:OYXBlE8iDW1jtIR+MAcWNdF2R

  Score

  10^/10

  alienbotcerberusbankerevasioninfostealerratstealthtrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Requests enabling of the accessibility settings.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3