Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome3.18.2.apk

  • Size

    3.0MB

  • Sample

    210318-snt3vhbkae

  • MD5

    061c838dffa17d136956b4eb9815d54c

  • SHA1

    ee5af102c65e5da10a7b8fccd21423f3d29d1d44

  • SHA256

    24893879c3a9e87ac259bc6557a0ed223bcf1abb7690ccd2edb6422f525da4a5

  • SHA512

    b871d22e2c86b28b78906807750d3dca9561997df45a84818e153d152e0907993c3e8a8fa3c99142181a98bddb5f0d7881018a83c031c3fa928111744199056c

Score
10/10
alienbotandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://fiollool.ga

Targets

    • Target

      Chrome3.18.2.apk

    • Size

      3.0MB

    • MD5

      061c838dffa17d136956b4eb9815d54c

    • SHA1

      ee5af102c65e5da10a7b8fccd21423f3d29d1d44

    • SHA256

      24893879c3a9e87ac259bc6557a0ed223bcf1abb7690ccd2edb6422f525da4a5

    • SHA512

      b871d22e2c86b28b78906807750d3dca9561997df45a84818e153d152e0907993c3e8a8fa3c99142181a98bddb5f0d7881018a83c031c3fa928111744199056c

    Score
    10/10
    alienbotbankerinfostealerobfuscationstealthtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks