Overview

overview

10

Static

static

Android APK

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    chrome2321.apk

  • Size

    3.6MB

  • Sample

    210523-2fdn2hyld6

  • MD5

    a9a69efa43b3a4d4b1c0f01986f5538a

  • SHA1

    4112b9f368e53da23757c86cb094f4ba18054fa0

  • SHA256

    c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99

  • SHA512

    1d09cb37a30322c14f373f8b172490cf68b4fec7020e4e1c908aae801123ed7ccdc5d2be65105394e047802912554b08ed1118b95207b34f089763d1fcf09700

Score
10/10
alienbotandroidbankerinfostealerobfuscationtrojan

Malware Config

Extracted

Family

alienbot

C2

http://opensearchi.kz

Targets

    • Target

      chrome2321.apk

    • Size

      3.6MB

    • MD5

      a9a69efa43b3a4d4b1c0f01986f5538a

    • SHA1

      4112b9f368e53da23757c86cb094f4ba18054fa0

    • SHA256

      c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99

    • SHA512

      1d09cb37a30322c14f373f8b172490cf68b4fec7020e4e1c908aae801123ed7ccdc5d2be65105394e047802912554b08ed1118b95207b34f089763d1fcf09700

    Score
    10/10
    alienbotbankerinfostealerobfuscationtrojan

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

      bankertrojaninfostealeralienbot

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks