Overview

overview

10

Static

static

8

Android APK

android_x86

10

Analysis

  • max time kernel
    878813s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    11/08/2021, 08:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Turk_ifsa_Gizli_Cekim_obf.apk
  • Size 3.0MB
  • Sample210811-vbqmerls12
  • SHA256 da43b86847f10c4578be3c80104729f243c6724d9f151bf8cfe087d09a9f74b9
  • MD5 SHA1 SHA512
Score
10/10
alienbotbankerinfostealerobfuscationtrojan

Malware Config

Extracted

Family

  • alienbot

C2

  • http://buralarnelernerelerhem.club

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 12 IoCs
    obfuscation

Processes

  • group.finish.index
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4697
    • group.finish.index
      2⤵
        PID:4751
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:4751

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads