Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.14.apk

  • Size

    3.0MB

  • Sample

    210317-g7atbv2sne

  • MD5

    58590a49c7c2a1c3740860a26602371f

  • SHA1

    815d194211b99fd4d9e00c3eeb8b4f515a8ef24d

  • SHA256

    111f6d5f641eea54a7035266526c0357d8b362634f36096a990856a0560bdb1e

  • SHA512

    0475f736b1dcb9130a41f6f71bd9d552878f760c5ca0088020cdc0f816fbaf770a5bd51a547036bb94ef86a7b5eb0f172f8578a9e64d68885615a5d4974bf9dd

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.14.apk

    • Size

      3.0MB

    • MD5

      58590a49c7c2a1c3740860a26602371f

    • SHA1

      815d194211b99fd4d9e00c3eeb8b4f515a8ef24d

    • SHA256

      111f6d5f641eea54a7035266526c0357d8b362634f36096a990856a0560bdb1e

    • SHA512

      0475f736b1dcb9130a41f6f71bd9d552878f760c5ca0088020cdc0f816fbaf770a5bd51a547036bb94ef86a7b5eb0f172f8578a9e64d68885615a5d4974bf9dd

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks