Overview

overview

10

Static

static

7

k0ZWUDiuIC_obf.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    k0ZWUDiuIC_obf.apk

  • Size

    3.1MB

  • Sample

    211016-wvw6facbg2

  • MD5

    33ff28072a93d566a99b79820e09ca2a

  • SHA1

    248423df9bc8dff47afa99d69584d908749ba481

  • SHA256

    5ad9093d9349b0b87ee912eca2ed0a3b0b2d0cfba3ecffc8fa09142149d34dc8

  • SHA512

    1056141c9aa873d98c39319072422f0eeb657722906c9778b849b7c86d87e6fdbb0cd6f3c2b76c8a5e1a5e2dd8344da5b0d51473242eddd4a6dd91558d60b08a

Score
10/10
alienbotandroidbankerinfostealerobfuscationtrojan

Malware Config

Extracted

Family

alienbot

C2

http://ad-alien.ml

Targets

    • Target

      k0ZWUDiuIC_obf.apk

    • Size

      3.1MB

    • MD5

      33ff28072a93d566a99b79820e09ca2a

    • SHA1

      248423df9bc8dff47afa99d69584d908749ba481

    • SHA256

      5ad9093d9349b0b87ee912eca2ed0a3b0b2d0cfba3ecffc8fa09142149d34dc8

    • SHA512

      1056141c9aa873d98c39319072422f0eeb657722906c9778b849b7c86d87e6fdbb0cd6f3c2b76c8a5e1a5e2dd8344da5b0d51473242eddd4a6dd91558d60b08a

    Score
    10/10
    alienbotbankerinfostealerobfuscationtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks