General
-
Target
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
-
Size
456KB
-
Sample
240226-sycdnahe43
-
MD5
b72c6108be79544049a01a1e35769f9d
-
SHA1
8e32645c945c37fe68d42dd439a65dc6efae8e5f
-
SHA256
98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
-
SHA512
383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
-
SSDEEP
6144:g1ieJKhn6YB7IfTLrQKV8EHCtxS5uxWet9zXRVGVF6XT3XXT3e1/D3DhcM8nD1AP:g0ngfrdks8ddGVYjHjo8DO7n88DO7nq
Behavioral task
behavioral1
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
alienbot
http://kremmilk.xyz
Targets
-
-
Target
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
-
Size
456KB
-
MD5
b72c6108be79544049a01a1e35769f9d
-
SHA1
8e32645c945c37fe68d42dd439a65dc6efae8e5f
-
SHA256
98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
-
SHA512
383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
-
SSDEEP
6144:g1ieJKhn6YB7IfTLrQKV8EHCtxS5uxWet9zXRVGVF6XT3XXT3e1/D3DhcM8nD1AP:g0ngfrdks8ddGVYjHjo8DO7n88DO7nq
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-