Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SEHIRKISITLAMALARI.apk

  • Size

    3.1MB

  • Sample

    210327-fxv4w74gpx

  • MD5

    f9ab24026c0da7b9c910527f15075d57

  • SHA1

    d84094dade087a9114ad3304cb0a05f0a2be82b1

  • SHA256

    96a649922e92b33ccd5aae15c6c39ab573c9b791cc2edefd880343ee946f5cc0

  • SHA512

    ad10ff7514783d445a6487603576a3f407873cd3dd00592812d72736ea5b15a5cb7e63a68a5b8dc2ed2e5ed22aa10f48a630fe6cd0e955fe75d4c3d2eaaa72ec

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://isthebeachforever.xyz

Targets

    • Target

      SEHIRKISITLAMALARI.apk

    • Size

      3.1MB

    • MD5

      f9ab24026c0da7b9c910527f15075d57

    • SHA1

      d84094dade087a9114ad3304cb0a05f0a2be82b1

    • SHA256

      96a649922e92b33ccd5aae15c6c39ab573c9b791cc2edefd880343ee946f5cc0

    • SHA512

      ad10ff7514783d445a6487603576a3f407873cd3dd00592812d72736ea5b15a5cb7e63a68a5b8dc2ed2e5ed22aa10f48a630fe6cd0e955fe75d4c3d2eaaa72ec

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks