Extracted

Extracted

• • Target

    52abe8e7b491c4674f924c7c116e0998

  • Size

    3.2MB

  • MD5

    52abe8e7b491c4674f924c7c116e0998

  • SHA1

    790ac6997c1b9042e157e4dd2f314d5077155ecc

  • SHA256

    90ddf3acf9053e3d61ce3a125bd4998c71e75621567040cd31d3d27e76d3876f

  • SHA512

    d16fc4e8d3a53129babcab8ac128820089060f39825487e840af199c62f9b763e71aeacdec5389ad0520cbf36ff6e8388e5f7c299354fbcf6ab421527cfd6226

  • SSDEEP

    98304:9pg60BgELESYXj60Y2tGiR640ejpcBtmHXTIl:9pguSyj605tGiR0Eqrmcl

  Score

  10^/10

  alienbotcerberusbankerevasioninfostealerratstealthtrojan

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot

  • Cerberus

    An Android banker that is being rented to actors beginning in 2019.

    bankertrojaninfostealerevasionratcerberus

  • Cerberus payload

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher

    stealthtrojan

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3