Analysis
- max time kernel
153s - max time network
135s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
- submitted
26/02/2024, 15:31
General
- Target 98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
- Size 456KB
- Sample240226-sycdnahe43
- SHA256 98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
Score
10/10
Malware Config
Extracted
Family
-
alienbot
C2
-
http://kremmilk.xyz
Signatures
- Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
- Cerberus
An Android banker that is being rented to actors beginning in 2019.
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
- Removes its main activity from the application launcher 8 IoCs
Processes
-
com.hcgetl.nysgtxkveqdzrpb1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher