Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Android_Guncelleme.apk

  • Size

    3.2MB

  • Sample

    210420-pzzn73y59n

  • MD5

    95e28bb8af6e9a6dd7cbc2ee39bac56f

  • SHA1

    42018369d2b45d9f479c7b3453af54d1c170a568

  • SHA256

    f3c9d5ce9180f7e8177bf1e8a6e1a42b7c8504ce3c723437a3f2b8b6acab7e42

  • SHA512

    3ca841addff26ba211a44a494b503a3fa4e74de99741c02c7849f4512f3682024ee5105c564def14ecc31cfc5e88802b17263775b0f9e8be123c31c76a664fe8

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://seninle1tik.digital

Targets

    • Target

      Android_Guncelleme.apk

    • Size

      3.2MB

    • MD5

      95e28bb8af6e9a6dd7cbc2ee39bac56f

    • SHA1

      42018369d2b45d9f479c7b3453af54d1c170a568

    • SHA256

      f3c9d5ce9180f7e8177bf1e8a6e1a42b7c8504ce3c723437a3f2b8b6acab7e42

    • SHA512

      3ca841addff26ba211a44a494b503a3fa4e74de99741c02c7849f4512f3682024ee5105c564def14ecc31cfc5e88802b17263775b0f9e8be123c31c76a664fe8

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks