EventBot
Malware family · 5 sample(s) · 10 indicator record(s) · 1 signing certificate(s) · Active 2020-03-01 → 2020-03-21 (experimental)
About EventBot
Android banking trojan whose C2 URLs sit as http(s) const-strings in the static initializer of the /example/eventbot/cfg config class.
Indicators
| Indicator | Type | Sample | First seen |
|---|---|---|---|
| ora.carlaarrabitoarchitetto.com/gate_cb8a5aea1ab302f0_b | domain | 42344ae56337… | 2020-03-01 |
| ora.carlaarrabitoarchitetto.com/gate_cb8a5aea1ab302f0_c | domain | 7b1ac3a8caa5… | 2020-03-19 |
| ora.carlaarrabitoarchitetto.com/gate_cb8a5aea1ab302f0_b | domain | b57d2cef4419… | 2020-03-03 |
| ora.carlaarrabitoarchitetto.com/gate_cb8a5aea1ab302f0_c | domain | f2a5bb87811a… | 2020-03-20 |
| ora.carlaarrabitoarchitetto.com/gate_cb8a5aea1ab302f0_c | domain | fa6897c95fc9… | 2020-03-21 |
| ora.studiolegalebasili.com/gate_cb8a5aea1ab302f0_b | domain | 42344ae56337… | 2020-03-01 |
| ora.studiolegalebasili.com/gate_cb8a5aea1ab302f0_c | domain | 7b1ac3a8caa5… | 2020-03-19 |
| ora.studiolegalebasili.com/gate_cb8a5aea1ab302f0_b | domain | b57d2cef4419… | 2020-03-03 |
| ora.studiolegalebasili.com/gate_cb8a5aea1ab302f0_c | domain | f2a5bb87811a… | 2020-03-20 |
| ora.studiolegalebasili.com/gate_cb8a5aea1ab302f0_c | domain | fa6897c95fc9… | 2020-03-21 |