Overview

overview

10

Static

static

Android APK

android_x86_64

10

Analysis

  • max time kernel
    42409s
  • max time network
    150s
  • platform
    android_x86_64
  • resource
    android-x86_64
  • submitted
    05-03-2021 13:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Chrome3.3.39.apk

  • Size

    3.2MB

  • MD5

    53a43f911ccbb37ee659216a3eb554ba

  • SHA1

    10a722a2db60e1ad6dc770405b82e519df85b1e0

  • SHA256

    7c0049eaabd4a8a29f89124a6270c065c7ce543ea9123c76b8e4572757ccfb54

  • SHA512

    233d4d611f47bc38d0b5e7d1fabc5c1299f36941b4cc2f3d0f8d4182010da508edc40098026c531e44ded5f155bf23c6b898f9ea4b6554df394f8aafb585739e

Score
10/10
alienbotbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://fiollool.ga

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Removes its main activity from the application launcher 2 IoCs
    stealthtrojan
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 61 IoCs
    obfuscation
  • 28 IoCs

Processes

  • shine.furnace.original
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3608
    • shine.furnace.original
      2⤵
        PID:3660
      • getprop
        2⤵
          PID:3660

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads