Overview

overview

10

Static

static

8

Android APK

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    121ab93c79565336d91b6e6bf89719c0b165104ac9f55a6ab6ff0340670c72b4.apk

  • Size

    3.8MB

  • Sample

    210729-2qz21pe3xe

  • MD5

    5d0c6c8fca3e9ce1bac29566735129dc

  • SHA1

    6eb3efbcd828275af2b5ee90e36ccf5fe42536ec

  • SHA256

    121ab93c79565336d91b6e6bf89719c0b165104ac9f55a6ab6ff0340670c72b4

  • SHA512

    5ff8d861b2ed28ba50a82e83870758bf87205d7a39a5e218f3493c8b1404af13846e07a8eceb6e0cbcefd2b5348c724991bfb4a168d1c45f0c6b68cef83dd7f4

Score
10/10
alienbotandroidbankerinfostealerobfuscationtrojan

Malware Config

Targets

    • Target

      121ab93c79565336d91b6e6bf89719c0b165104ac9f55a6ab6ff0340670c72b4.apk

    • Size

      3.8MB

    • MD5

      5d0c6c8fca3e9ce1bac29566735129dc

    • SHA1

      6eb3efbcd828275af2b5ee90e36ccf5fe42536ec

    • SHA256

      121ab93c79565336d91b6e6bf89719c0b165104ac9f55a6ab6ff0340670c72b4

    • SHA512

      5ff8d861b2ed28ba50a82e83870758bf87205d7a39a5e218f3493c8b1404af13846e07a8eceb6e0cbcefd2b5348c724991bfb4a168d1c45f0c6b68cef83dd7f4

    Score
    10/10
    alienbotbankerinfostealerobfuscationtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

    behavioral1

MITRE ATT&CK Matrix

Tasks