Overview

overview

10

Static

static

Android APK

android_x86_64

10

Analysis

  • max time kernel
    3671317s
  • max time network
    150s
  • platform
    android_x86_64
  • resource
    android-x86_64
  • submitted
    16-04-2021 13:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    015737cccb4f8d953a8bd467413f42f02011fe99a080343a87117be941525396.apk

  • Size

    3.0MB

  • MD5

    15aebcb0ec47bc61eb7da673bf476659

  • SHA1

    22db1208082ff490ce009f31504b4acccc468787

  • SHA256

    015737cccb4f8d953a8bd467413f42f02011fe99a080343a87117be941525396

  • SHA512

    917bcee1a894b54cdb7241615a840dd0181ca54dda54070a89340055fdd930f15b00b2ac612a79b4f870babcca978e2011a850501c3212a1ef7dae7d70f5421e

Score
10/10
alienbotbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://FulfillAgencytrooopy995.ga

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Removes its main activity from the application launcher 3 IoCs
    stealthtrojan
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 64 IoCs
    obfuscation

Processes

  • deposit.economy.glue
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3634
    • deposit.economy.glue
      2⤵
        PID:3680
      • getprop
        2⤵
          PID:3680
        • deposit.economy.glue
          2⤵
            PID:3779
          • getprop
            2⤵
              PID:3779

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads