Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.13.apk

  • Size

    2.9MB

  • Sample

    210317-ymn2x7vp8n

  • MD5

    8307880eae34db16e9e9e31212a3f04c

  • SHA1

    539d85b358dfd9185e5cc5f6ba751ff23721d841

  • SHA256

    b9a81a19245692d00f546d32f2bd2bca8281d2e0ecea313dd039255c3894e34e

  • SHA512

    b69fba3e6d1abd8fbb98c0b451934d38ef17909be860395f61827bfa3bb88c4773742e63d299543642ccb446618fc609af5a2a67828a8a9bb777dabbddfc6d74

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.13.apk

    • Size

      2.9MB

    • MD5

      8307880eae34db16e9e9e31212a3f04c

    • SHA1

      539d85b358dfd9185e5cc5f6ba751ff23721d841

    • SHA256

      b9a81a19245692d00f546d32f2bd2bca8281d2e0ecea313dd039255c3894e34e

    • SHA512

      b69fba3e6d1abd8fbb98c0b451934d38ef17909be860395f61827bfa3bb88c4773742e63d299543642ccb446618fc609af5a2a67828a8a9bb777dabbddfc6d74

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks