Overview

overview

10

Static

static

7

manager.apk

android-9-x86

10

manager.apk

android-10-x64

10

manager.apk

android-11-x64

10

Resubmissions

27-03-2023 09:59

230327-l1fqjaeh6s 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    manager.apk

  • Size

    1.7MB

  • Sample

    230327-l1fqjaeh6s

  • MD5

    a6f135cf0459e5c4432b16d2d34d0279

  • SHA1

    b2a7f327437e5cc42d05dfb3fd4029a8ad0af44e

  • SHA256

    dc9ca870cd4df91ab1291d28ee658838dc83aeba0cbcd4db43c117aaa251260e

  • SHA512

    867113ba6d579fe4dae4e77196abc058f2fc6a1f4649a7e6dc3bf417e9843d6aafd07bb77f35d6ed0722d786a41d89a5bd045ab6ae877c50312ac6d91e563f64

  • SSDEEP

    49152:7lEm4m0cDWuWArTqqsw84uT5vH+zOS89ljo+g1e4S19YifhK:7lEmZ0c6uWArxk4S5GzOSND18fhK

Score
10/10
alienbotandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://164.90.178.90

rc4.plain

Targets

    • Target

      manager.apk

    • Size

      1.7MB

    • MD5

      a6f135cf0459e5c4432b16d2d34d0279

    • SHA1

      b2a7f327437e5cc42d05dfb3fd4029a8ad0af44e

    • SHA256

      dc9ca870cd4df91ab1291d28ee658838dc83aeba0cbcd4db43c117aaa251260e

    • SHA512

      867113ba6d579fe4dae4e77196abc058f2fc6a1f4649a7e6dc3bf417e9843d6aafd07bb77f35d6ed0722d786a41d89a5bd045ab6ae877c50312ac6d91e563f64

    • SSDEEP

      49152:7lEm4m0cDWuWArTqqsw84uT5vH+zOS89ljo+g1e4S19YifhK:7lEmZ0c6uWArxk4S5GzOSND18fhK

    Score
    10/10
    alienbotbankerevasioninfostealertrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks