Overview

overview

10

Static

static

8

Android APK

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    deb68c04baf03f0f95e8fcb171d48183c832a6bc5fc7489d016529bd49178bfa.apk

  • Size

    3.8MB

  • Sample

    210729-8vgbszzjpe

  • MD5

    be3f083b84796f738345eeb9a58e7d61

  • SHA1

    b836855d9b3d62d523c551fb20dbccdbac41a8dc

  • SHA256

    deb68c04baf03f0f95e8fcb171d48183c832a6bc5fc7489d016529bd49178bfa

  • SHA512

    e8086bcee0aa5c85cb11416d4e118c43866796659a1aa97fa1c3aa0cde3317e1e0a49a8b03dda03122946773b733368d0955cb0ce126dd6fb49d32f36c173d08

Score
10/10
alienbotandroidbankerinfostealerobfuscationtrojan

Malware Config

Targets

    • Target

      deb68c04baf03f0f95e8fcb171d48183c832a6bc5fc7489d016529bd49178bfa.apk

    • Size

      3.8MB

    • MD5

      be3f083b84796f738345eeb9a58e7d61

    • SHA1

      b836855d9b3d62d523c551fb20dbccdbac41a8dc

    • SHA256

      deb68c04baf03f0f95e8fcb171d48183c832a6bc5fc7489d016529bd49178bfa

    • SHA512

      e8086bcee0aa5c85cb11416d4e118c43866796659a1aa97fa1c3aa0cde3317e1e0a49a8b03dda03122946773b733368d0955cb0ce126dd6fb49d32f36c173d08

    Score
    10/10
    alienbotbankerinfostealerobfuscationtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    behavioral1

MITRE ATT&CK Matrix

Tasks