Extracted

• • Target
    eventbot.apk
  • Size 1.9MB
  • SHA256 42344ae56337fe802340385c821b6be151483d99ae3572e50e76dfc8b790033a
  • MD5 e1229d332ca43ac2b640084a0dae9bbe
  • SHA1 1f3bdc98d977f3c99cb71d80f64e74b91da62671
  • SHA512 e905d0355d9dfb736f3def4a1b4e84082fdeb3c94066e4ccab83ad16b5cd81e6427fd76cb3e5c646ecb7b969fcc13a9d40139bc71c2fd9845f63138522594f0e
  • SSDEEP 49152:rRUjPhn0wmBi1qNXABJLeH5ox32UoT434Upef4:rRe0wm9lkJaOAc3O4
  • TLSH
    T12195DF82F3D9AD2FCC73C0325BB1073625868C66CA42E7475664B36C59BBED44E85BC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryeventbotimpactinfostealeroverlaytrojan

  • EventBot

    A new Android banking trojan started to appear in March 2020.

    bankertrojaninfostealeroverlayeventbot

  • Eventbot family

    eventbot

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery
  behavioral1