Overview

overview

10

Static

static

Android APK

android_x86

10

Analysis

  • max time kernel
    4006618s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86_arm
  • submitted
    20-04-2021 10:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    guncelleme.apk

  • Size

    3.7MB

  • MD5

    c184e85063a08d73206e31fa80475588

  • SHA1

    e691051953a7616a1f39e7495c19c0f585c02f78

  • SHA256

    a298c2ad9e9bac7e160dce844f99bba4971f320c0ad8290a35c3cf7b3b9f44d5

  • SHA512

    8f184aaed1bc98fd0f163294e96ee2be113fd5c53dd2bb62c221e1247b4f766447a956e2d9f2e3ab36b0f5969f4b25d5ef0786be7b12b991e4eadd6eed059655

Score
10/10
alienbotbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

alienbot

C2

http://kralvevezir21.digital

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Removes its main activity from the application launcher 1 IoCs
    stealthtrojan
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 44 IoCs
    obfuscation

Processes

  • coach.mystery.liquid
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4711

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads