Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23032021.apk

  • Size

    3.5MB

  • Sample

    210323-m3pwsgrsas

  • MD5

    c6169b9c5ca09f5be5bb24397899272c

  • SHA1

    f9eac33b360250ad4a14b29c2614c16587ac1d5c

  • SHA256

    cc441b8c98164c53a95407db183a3ee71f64432acb1446f1bee7b96c2b060270

  • SHA512

    9e4d39798d571c6204836647b398957b46f5d077f5356cba43a51a28dd9aee7d19b0e3786d00f774d74bf141590c5206e39e26a0aaf1ca18347495e4343db38c

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://newlf21.com

Targets

    • Target

      23032021.apk

    • Size

      3.5MB

    • MD5

      c6169b9c5ca09f5be5bb24397899272c

    • SHA1

      f9eac33b360250ad4a14b29c2614c16587ac1d5c

    • SHA256

      cc441b8c98164c53a95407db183a3ee71f64432acb1446f1bee7b96c2b060270

    • SHA512

      9e4d39798d571c6204836647b398957b46f5d077f5356cba43a51a28dd9aee7d19b0e3786d00f774d74bf141590c5206e39e26a0aaf1ca18347495e4343db38c

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks