Overview

overview

10

Static

static

Android APK

android_x86_64

10

Analysis

  • max time kernel
    1193003s
  • max time network
    150s
  • platform
    android_x86_64
  • resource
    android-x86_64
  • submitted
    18-03-2021 20:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Chrome3.18.15.apk

  • Size

    3.1MB

  • MD5

    35d21e2a819590c81c592ed2ce48dd8d

  • SHA1

    1cf964734b18517a218c85b086b383b2a710abed

  • SHA256

    688f0c5efa0f93dbcc7600aa03fffa65f1ba4038931a67332b5255162585ef56

  • SHA512

    e2119e068254a597cfeae6eb6f46e2568367b9e806c2f46baa2d93120d32ef89c27e051a5ab790e539ad90059251bbae0524e3423c1ccff572adc7b454e145d7

Score
10/10
alienbotbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://fiollool.ga

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Removes its main activity from the application launcher 6 IoCs
    stealthtrojan
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 64 IoCs
    obfuscation
  • 40 IoCs

Processes

  • sleep.accuse.blame
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3608
    • sleep.accuse.blame
      2⤵
        PID:3658
      • getprop
        2⤵
          PID:3658
        • sleep.accuse.blame
          2⤵
            PID:3739
          • getprop
            2⤵
              PID:3739
            • sleep.accuse.blame
              2⤵
                PID:3770
              • getprop
                2⤵
                  PID:3770
                • sleep.accuse.blame
                  2⤵
                    PID:3819
                  • getprop
                    2⤵
                      PID:3819
                    • sleep.accuse.blame
                      2⤵
                        PID:3849
                      • getprop
                        2⤵
                          PID:3849

                      Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads