Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.2.apk

  • Size

    3.0MB

  • Sample

    210317-2rfnh949mx

  • MD5

    b1ed5652cf02e870527e477dcf0883ba

  • SHA1

    64b108ebf8310762a36f4e5f3eb6ea7203ea98b9

  • SHA256

    c0844bcfe9dc7da58bd6ec410e50479a73e76e8a2d6aa21bef241fb64a1cdd36

  • SHA512

    86260692dbb0d97b826166e2656c9dd0aa43cde34cd148b4c89af78fe28bfa40b91697ebe318679afd73a527c86db882344a3825340c932d1419b617e18aa041

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.2.apk

    • Size

      3.0MB

    • MD5

      b1ed5652cf02e870527e477dcf0883ba

    • SHA1

      64b108ebf8310762a36f4e5f3eb6ea7203ea98b9

    • SHA256

      c0844bcfe9dc7da58bd6ec410e50479a73e76e8a2d6aa21bef241fb64a1cdd36

    • SHA512

      86260692dbb0d97b826166e2656c9dd0aa43cde34cd148b4c89af78fe28bfa40b91697ebe318679afd73a527c86db882344a3825340c932d1419b617e18aa041

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks