Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.7.apk

  • Size

    3.0MB

  • Sample

    210317-4pyjdhjnks

  • MD5

    ddffce031367a70a26e49433a889651f

  • SHA1

    05c508054a5d01388a63bcaefafa0e14b3500779

  • SHA256

    6e2ab7f93e16da7384d3409607c8d3c6737f09e79b10f3112945985ca4755634

  • SHA512

    1610b1cc925f69e87e35e57ae821ef050487b159b1d1b2f3a9f1b8026cf38396edf2967969ce0996d87fab5a780199f9e45a8018298819ba95fa60c1f4da38e0

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.7.apk

    • Size

      3.0MB

    • MD5

      ddffce031367a70a26e49433a889651f

    • SHA1

      05c508054a5d01388a63bcaefafa0e14b3500779

    • SHA256

      6e2ab7f93e16da7384d3409607c8d3c6737f09e79b10f3112945985ca4755634

    • SHA512

      1610b1cc925f69e87e35e57ae821ef050487b159b1d1b2f3a9f1b8026cf38396edf2967969ce0996d87fab5a780199f9e45a8018298819ba95fa60c1f4da38e0

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks