Trusted Design

Alice: A Lightweight, Compact, No-Nonsense ATM Malware

概要

Trend Micro has discovered a new family of ATM malware called Alice, which is the most stripped down ATM malware family we have ever encountered. Unlike other ATM malware families, Alice cannot be controlled via the numeric pad of ATMs; neither does it have information stealing features. It is meant solely to empty the safe of ATMs. We detect this new malware family as BKDR_ALICE.A. Trend Micro first discovered the Alice ATM malware family in November 2016 as result of our joint research project on ATM malware with Europol EC3. We collected a list of hashes and the files corresponding to those hashes were then retrieved from VirusTotal for further analysis. One of those binaries was initially thought to be a new variant of the Padpin ATM malware family. However, after reverse analysis, we found that it to be part of a brand new family, which we called Alice.

Created: 2026-02-23

Indicators

• FileHash-SHA256 - b8063f1323a4ae8846163cc6e84a3b8a80463b25b9ff35d70a1c497509d48539 -
• FileHash-SHA256 - 04f25013eb088d5e8a6e55bdb005c464123e6605897bd80ac245ce7ca12a7a70 -

類似Pulses

• SUCEFUL: Next Generation ATM Malware (score: 0.66)
• Skimer: New, Improved Variant Targeting ATMs (score: 0.65)
• Meet GreenDispenser: A New Breed of ATM Malware (score: 0.64)
• ATMZombie: banking trojan in Israeli waters (score: 0.61)
• Exploring Bergard: Old Malware with New Tricks (score: 0.59)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る