Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.17.5.apk

  • Size

    3.0MB

  • Sample

    210317-zqttsbe8xx

  • MD5

    fdc383ed350a6a824e66850b6a67212f

  • SHA1

    7fc77c5bd8da25d7c86714a9bfeab332d3ba23bd

  • SHA256

    23f36ad49ecff562db463b3d1bb326ea5c72683c908a67271f80f8d87e868056

  • SHA512

    62cf5df0a7c086b84fb8c549623a91d6133bde1e012538f9d39763571b02cd68737ea91f06505c709784466fccf1252d14c02a96ff7cd32d515b491d71f6111a

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://suffoopp.ga

Targets

    • Target

      Chrome3.17.5.apk

    • Size

      3.0MB

    • MD5

      fdc383ed350a6a824e66850b6a67212f

    • SHA1

      7fc77c5bd8da25d7c86714a9bfeab332d3ba23bd

    • SHA256

      23f36ad49ecff562db463b3d1bb326ea5c72683c908a67271f80f8d87e868056

    • SHA512

      62cf5df0a7c086b84fb8c549623a91d6133bde1e012538f9d39763571b02cd68737ea91f06505c709784466fccf1252d14c02a96ff7cd32d515b491d71f6111a

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks