Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.20.apk

  • Size

    3.0MB

  • Sample

    210317-292vv5vdks

  • MD5

    cb6b536b243f0776a80b07bf25073d9e

  • SHA1

    065ef9776837be35f90e6233e6d4e483566bd324

  • SHA256

    c53638a6d1ad0a372cad83cbe221089f8fd1f0efdadc8c21f2073a22c39f2ffe

  • SHA512

    0e83d490df5356d2313cf1979fabfe34a728eaa5d84a29385372efb81346748053eebb5daf46b029f9e07795f3bf820d4a832ff9d551518d5e25e25e80dbe7da

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.20.apk

    • Size

      3.0MB

    • MD5

      cb6b536b243f0776a80b07bf25073d9e

    • SHA1

      065ef9776837be35f90e6233e6d4e483566bd324

    • SHA256

      c53638a6d1ad0a372cad83cbe221089f8fd1f0efdadc8c21f2073a22c39f2ffe

    • SHA512

      0e83d490df5356d2313cf1979fabfe34a728eaa5d84a29385372efb81346748053eebb5daf46b029f9e07795f3bf820d4a832ff9d551518d5e25e25e80dbe7da

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks