Analysis
-
max time kernel
3611493s -
max time network
190s -
platform
android_x64 -
resource
android-x64 -
submitted
08-02-2022 00:09
General
-
Target
f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0.apk
-
Size
2.7MB
-
MD5
aa2abc87e71ec70eee4fc7550124754d
-
SHA1
3ce31150929c6e0dbddf32607c58589bbd68095d
-
SHA256
f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0
-
SHA512
dfc0e12141a233ea9149cae3c5907d861a14d30812cedda171ede5fbc410fa0df638463cca8ef5d7aae92852f2be191828f39a22edf8b96e7d0a9b8d8d8b05ef
Malware Config
Extracted
alienbot
http://alunss.ml
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
alcohol.patch.crumble1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
a475f12e4ff5e29dbec730ad33c722f6
SHA162dafb6d54d9a2fde96fa44b4d1a6987f9819cc4
SHA2561bc4482be2f03f3a7a13c7eccb43161286ad1c7f18097a0fc5aafd148250a3ff
SHA512ed1b1b711a2e0d05bf32054493af90465cd7e76d99610c291f9f0c504353798992b3b6600d5e04e7bf676bbfb7c947ce5fe24e9dea11c5c5f9bb69c4dc7a85d9
-
MD5
a475f12e4ff5e29dbec730ad33c722f6
SHA162dafb6d54d9a2fde96fa44b4d1a6987f9819cc4
SHA2561bc4482be2f03f3a7a13c7eccb43161286ad1c7f18097a0fc5aafd148250a3ff
SHA512ed1b1b711a2e0d05bf32054493af90465cd7e76d99610c291f9f0c504353798992b3b6600d5e04e7bf676bbfb7c947ce5fe24e9dea11c5c5f9bb69c4dc7a85d9