Overview

overview

10

Static

static

7

46c7b95d0f...d7.apk

android_x86

10

46c7b95d0f...d7.apk

android_x64

10

46c7b95d0f...d7.apk

android_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46c7b95d0f2dd95d690c3288cf2d0a02d9f6ebbeab817a4f6d185ae94942a4d7

  • Size

    1.9MB

  • Sample

    220521-d93bwscbaj

  • MD5

    22592d03280a25d92a894bf6777eac0e

  • SHA1

    f7e122f0c92f26a8dba9473435a0dbc671a3a907

  • SHA256

    46c7b95d0f2dd95d690c3288cf2d0a02d9f6ebbeab817a4f6d185ae94942a4d7

  • SHA512

    96b57f5415df22866b5a28dce18d9488b9ad42830b0e304e80488434d870998b04a8193933f6c0f7223a7560d9af0b99c2bd09a951dba464add9e9a8585064fe

Score
10/10
alienbotandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://cavresamiinverebamiin.best

Targets

    • Target

      46c7b95d0f2dd95d690c3288cf2d0a02d9f6ebbeab817a4f6d185ae94942a4d7

    • Size

      1.9MB

    • MD5

      22592d03280a25d92a894bf6777eac0e

    • SHA1

      f7e122f0c92f26a8dba9473435a0dbc671a3a907

    • SHA256

      46c7b95d0f2dd95d690c3288cf2d0a02d9f6ebbeab817a4f6d185ae94942a4d7

    • SHA512

      96b57f5415df22866b5a28dce18d9488b9ad42830b0e304e80488434d870998b04a8193933f6c0f7223a7560d9af0b99c2bd09a951dba464add9e9a8585064fe

    Score
    10/10
    alienbotbankerevasioninfostealertrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks