Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.4.apk

  • Size

    3.0MB

  • Sample

    210317-l3zgk69cce

  • MD5

    2c9618687be75daa7ee99b6ceb9f3fee

  • SHA1

    59a67ffaaf72910c50aa07ae6022fb58444f0ac6

  • SHA256

    c38df11d0c7ec8b8d661855096f4f2f7ff304a3eb4cdbcdf01cb4d310b290eed

  • SHA512

    71480769bcd79e094b0e9334c708f5d88f3d39372693b77bd97192f8098e34041690c105de130a45698e2ee85d3d8ff0ba545bcb7f88693670b80780fd8b7a5c

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.4.apk

    • Size

      3.0MB

    • MD5

      2c9618687be75daa7ee99b6ceb9f3fee

    • SHA1

      59a67ffaaf72910c50aa07ae6022fb58444f0ac6

    • SHA256

      c38df11d0c7ec8b8d661855096f4f2f7ff304a3eb4cdbcdf01cb4d310b290eed

    • SHA512

      71480769bcd79e094b0e9334c708f5d88f3d39372693b77bd97192f8098e34041690c105de130a45698e2ee85d3d8ff0ba545bcb7f88693670b80780fd8b7a5c

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks