Overview

overview

10

Static

static

Android APK

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    guncelleme.apk

  • Size

    3.7MB

  • Sample

    210420-9ax6wmc7r6

  • MD5

    c184e85063a08d73206e31fa80475588

  • SHA1

    e691051953a7616a1f39e7495c19c0f585c02f78

  • SHA256

    a298c2ad9e9bac7e160dce844f99bba4971f320c0ad8290a35c3cf7b3b9f44d5

  • SHA512

    8f184aaed1bc98fd0f163294e96ee2be113fd5c53dd2bb62c221e1247b4f766447a956e2d9f2e3ab36b0f5969f4b25d5ef0786be7b12b991e4eadd6eed059655

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://kralvevezir21.digital

Targets

    • Target

      guncelleme.apk

    • Size

      3.7MB

    • MD5

      c184e85063a08d73206e31fa80475588

    • SHA1

      e691051953a7616a1f39e7495c19c0f585c02f78

    • SHA256

      a298c2ad9e9bac7e160dce844f99bba4971f320c0ad8290a35c3cf7b3b9f44d5

    • SHA512

      8f184aaed1bc98fd0f163294e96ee2be113fd5c53dd2bb62c221e1247b4f766447a956e2d9f2e3ab36b0f5969f4b25d5ef0786be7b12b991e4eadd6eed059655

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks