Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edevlet.apk

  • Size

    2.2MB

  • Sample

    201212-5z6xptvwra

  • MD5

    9ae42055cbeeea23fe962b2e51660c00

  • SHA1

    bbcf2bdcca0c7d2326b71429c604e7447667f0c0

  • SHA256

    c076650b8c03973f2f9f245a826cf0b7fa0d5add8182f33ec9b372d4b6796a04

  • SHA512

    ff3d47a6871ce275d98350df870cb291d00963cd90c4d6cb94830206565fc8b99f7ef9c4a21b0f39d69d8a240d541d6cbb5906c1c2f63ea5a959687b4ba23829

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://gunckerolu.xyz

Targets

    • Target

      edevlet.apk

    • Size

      2.2MB

    • MD5

      9ae42055cbeeea23fe962b2e51660c00

    • SHA1

      bbcf2bdcca0c7d2326b71429c604e7447667f0c0

    • SHA256

      c076650b8c03973f2f9f245a826cf0b7fa0d5add8182f33ec9b372d4b6796a04

    • SHA512

      ff3d47a6871ce275d98350df870cb291d00963cd90c4d6cb94830206565fc8b99f7ef9c4a21b0f39d69d8a240d541d6cbb5906c1c2f63ea5a959687b4ba23829

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks