Overview

overview

10

Static

static

8

Android APK

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf6407f001235645d8eb3b481ea3f763b8aec39d5a41f0e7039a14f412cdefd5.apk

  • Size

    3.6MB

  • Sample

    210805-x3mbylreve

  • MD5

    0af8d058f67ec444f4872b4874c1b918

  • SHA1

    5ed291b09cecf8e38d3cea780d23007c56fa5335

  • SHA256

    bf6407f001235645d8eb3b481ea3f763b8aec39d5a41f0e7039a14f412cdefd5

  • SHA512

    fff338971ab2f34e2fa3b0f676cfb4bec316f4474db8013374393d9e9702f050abaa5140c734c2a506e3b932113da335c7103d3575f06aec79deead20cde40cc

Score
10/10
alienbotandroidbankerinfostealerobfuscationtrojan

Malware Config

Extracted

Family

alienbot

C2

http://vaydemenescomeres.net

Targets

    • Target

      bf6407f001235645d8eb3b481ea3f763b8aec39d5a41f0e7039a14f412cdefd5.apk

    • Size

      3.6MB

    • MD5

      0af8d058f67ec444f4872b4874c1b918

    • SHA1

      5ed291b09cecf8e38d3cea780d23007c56fa5335

    • SHA256

      bf6407f001235645d8eb3b481ea3f763b8aec39d5a41f0e7039a14f412cdefd5

    • SHA512

      fff338971ab2f34e2fa3b0f676cfb4bec316f4474db8013374393d9e9702f050abaa5140c734c2a506e3b932113da335c7103d3575f06aec79deead20cde40cc

    Score
    10/10
    alienbotbankerinfostealerobfuscationtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks