Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.18.1.apk

  • Size

    3.0MB

  • Sample

    210318-qjfj5sgd22

  • MD5

    646d9d989a317e6a7b421cbd1d8cf337

  • SHA1

    0284b51e1b7200b868b536021848a6be42a54bc0

  • SHA256

    ad8f6dcfc3924cc55ed9976ebc43dae03bb884af3d6cc89aee2373300f6258f2

  • SHA512

    b0484b305b0c7c9a09d6a8d25ca2c8677eabd2e6eb1f0e38a36fe0e5263a2fa2908690857630aeb7f83066a88b5af29b478228e46d0489c07fff74b79d9cbd46

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://fiollool.ga

Targets

    • Target

      Chrome3.18.1.apk

    • Size

      3.0MB

    • MD5

      646d9d989a317e6a7b421cbd1d8cf337

    • SHA1

      0284b51e1b7200b868b536021848a6be42a54bc0

    • SHA256

      ad8f6dcfc3924cc55ed9976ebc43dae03bb884af3d6cc89aee2373300f6258f2

    • SHA512

      b0484b305b0c7c9a09d6a8d25ca2c8677eabd2e6eb1f0e38a36fe0e5263a2fa2908690857630aeb7f83066a88b5af29b478228e46d0489c07fff74b79d9cbd46

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks