Overview

overview

10

Static

static

7

4263d3225e...1a.apk

android_x86

10

4263d3225e...1a.apk

android_x64

1

4263d3225e...1a.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4263d3225ea2654a4ca4bce49250b1c74d8795584d90f4a5bc184530d8f0981a

  • Size

    322KB

  • Sample

    220708-c6q9saeafl

  • MD5

    e13254cc9096ca4c5aae7c92055561dc

  • SHA1

    ac7328c14c965e018af3e2144f90fc97df41f89e

  • SHA256

    4263d3225ea2654a4ca4bce49250b1c74d8795584d90f4a5bc184530d8f0981a

  • SHA512

    cb3fa0195181ef8762b42f6dcf50f01370694a12e187c1de04af313fe56093f80b660489e052ebe364ac91ef96b6887f3cc6350ef47c4fc767883fd667c0c181

Score
10/10
alienbotandroidbankerevasioninfostealertrojan

Malware Config

Targets

    • Target

      4263d3225ea2654a4ca4bce49250b1c74d8795584d90f4a5bc184530d8f0981a

    • Size

      322KB

    • MD5

      e13254cc9096ca4c5aae7c92055561dc

    • SHA1

      ac7328c14c965e018af3e2144f90fc97df41f89e

    • SHA256

      4263d3225ea2654a4ca4bce49250b1c74d8795584d90f4a5bc184530d8f0981a

    • SHA512

      cb3fa0195181ef8762b42f6dcf50f01370694a12e187c1de04af313fe56093f80b660489e052ebe364ac91ef96b6887f3cc6350ef47c4fc767883fd667c0c181

    Score
    10/10
    alienbotbankerevasioninfostealertrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Makes use of the framework's Accessibility service.

    • Requests enabling of the accessibility settings.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks