Overview

overview

10

Static

static

Android APK

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Android_Guncelleme.apk

  • Size

    2.8MB

  • Sample

    210420-as43qq8jsj

  • MD5

    a2cd1717b5cce415d20e61f8190b2d32

  • SHA1

    87af5e27170ee319c243cd61637c41b7e62d21fc

  • SHA256

    f409154a28f3ce4a2af50d1e570054c82a92481db5715011a92bc3776d0a3db3

  • SHA512

    951d17901e73fa1cf5f201a453810801418ccbef0b1e8a64cda0dc95c14dc715ac6f64c7a24dfd50f42d45a23220e6d89ae9302ce024c337a48409938bcd7172

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://seninle1tik.digital

Targets

    • Target

      Android_Guncelleme.apk

    • Size

      2.8MB

    • MD5

      a2cd1717b5cce415d20e61f8190b2d32

    • SHA1

      87af5e27170ee319c243cd61637c41b7e62d21fc

    • SHA256

      f409154a28f3ce4a2af50d1e570054c82a92481db5715011a92bc3776d0a3db3

    • SHA512

      951d17901e73fa1cf5f201a453810801418ccbef0b1e8a64cda0dc95c14dc715ac6f64c7a24dfd50f42d45a23220e6d89ae9302ce024c337a48409938bcd7172

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks