Overview

overview

10

Static

static

7

017584fa4a...d4.apk

android_x86

10

017584fa4a...d4.apk

android_x64

10

017584fa4a...d4.apk

android_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4

  • Size

    1.4MB

  • Sample

    220521-d96djscbal

  • MD5

    af54d23662954dbf66a7d7ae75c0b2d8

  • SHA1

    01d5948dc4f82623842897e96148b773995118dc

  • SHA256

    017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4

  • SHA512

    756a06f6b2ea91a86c4c79ca136d79c8f34b8c898f7dbc6e992d03393e2ef74ca6999cac16eb4d51fa99da4c0d11e65a7e272e372a040cc60e6268c30f55e6e9

Score
10/10
alienbotandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://installerflas453873.xyz

Targets

    • Target

      017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4

    • Size

      1.4MB

    • MD5

      af54d23662954dbf66a7d7ae75c0b2d8

    • SHA1

      01d5948dc4f82623842897e96148b773995118dc

    • SHA256

      017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4

    • SHA512

      756a06f6b2ea91a86c4c79ca136d79c8f34b8c898f7dbc6e992d03393e2ef74ca6999cac16eb4d51fa99da4c0d11e65a7e272e372a040cc60e6268c30f55e6e9

    Score
    10/10
    alienbotbankerevasioninfostealertrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks