chameleon | d52ee13dce622c4a50ec560f8076c06a617299d7d1200621c59c93c03573a0f7 | Triage

Sharing

General

Target

d52ee13dce622c4a50ec560f8076c06a617299d7d1200621c59c93c03573a0f7.bin
Size

3.1MB
Sample

250202-1xf98a1rhp
MD5

6d9a4d968e9976511075bf85cf70a27e
SHA1

f5be6c82c2d2523dac22c8c9d7b9fc62b66b59f4
SHA256

d52ee13dce622c4a50ec560f8076c06a617299d7d1200621c59c93c03573a0f7
SHA512

04cd1e1fd839b85448555eefd1dcd30cb095daf70104571f780ce8bb7bed0e8754b3a82433230b8d2f8bd792a7f1f9e913a092c1b3c21595c84bd8ec5ca914f6
SSDEEP

98304:PJigB3CtahhaNmXZEzqrMoXNR45unnzHEFqSgHWkG/WObLXQWmpIc8x:8A34mIuwknhkx

Score

10^/10

chameleon android banker defense_evasion evasion impact infostealer trojan

Malware Config

Targets

- Target
  
  d52ee13dce622c4a50ec560f8076c06a617299d7d1200621c59c93c03573a0f7.bin
- Size
  
  3.1MB
- MD5
  
  6d9a4d968e9976511075bf85cf70a27e
- SHA1
  
  f5be6c82c2d2523dac22c8c9d7b9fc62b66b59f4
- SHA256
  
  d52ee13dce622c4a50ec560f8076c06a617299d7d1200621c59c93c03573a0f7
- SHA512
  
  04cd1e1fd839b85448555eefd1dcd30cb095daf70104571f780ce8bb7bed0e8754b3a82433230b8d2f8bd792a7f1f9e913a092c1b3c21595c84bd8ec5ca914f6
- SSDEEP
  
  98304:PJigB3CtahhaNmXZEzqrMoXNR45unnzHEFqSgHWkG/WObLXQWmpIc8x:8A34mIuwknhkx
Score

10^/10

chameleon banker evasion impact infostealer trojan defense_evasion
- Chameleon
  Chameleon is an Android banking trojan first seen in 2023.
  trojan infostealer banker chameleon
- Chameleon family
  chameleon
- Chameleon payload
- Checks if the Android device is rooted.
  defense_evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

chameleonbankerevasionimpactinfostealertrojan

behavioral2

chameleonbankerevasionimpactinfostealertrojan

behavioral3

chameleonbankerdefense_evasionevasionimpactinfostealertrojan