Overview

overview

10

Static

static

Android APK

android_x86_64

10

Analysis

  • max time kernel
    1793342s
  • max time network
    153s
  • platform
    android_x86_64
  • resource
    android-x86_64_arm64
  • submitted
    25-03-2021 19:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e3ae7cb2eaa532da35412d2d96ec08b02a907678f18518c9e7d3dd59ddd96e67.apk

  • Size

    3.6MB

  • MD5

    dea978d07ac311a6e5c98704c01c95c5

  • SHA1

    2443f8e9795088d7277524cef6be6497ca4bc6da

  • SHA256

    e3ae7cb2eaa532da35412d2d96ec08b02a907678f18518c9e7d3dd59ddd96e67

  • SHA512

    c93800347bac73550477cdf5258bac1d760e2ddbf8b3608c2fd71c3b8e0d5f93f48d9decfe529c3b89fb07485c56f04dfc83007dd094803379aa8f61a98a47cf

Score
10/10
alienbotbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://ototmootot.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Removes its main activity from the application launcher 1 IoCs
    stealthtrojan
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 34 IoCs
    obfuscation
  • 64 IoCs

Processes

  • course.long.type
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4499

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads