Analysis
-
max time kernel
4079386s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm -
submitted
13-02-2022 12:49
General
-
Target
ba625262b247e4c79e729a83f53767c34fc0c25142eedbcc0e74f15d73c64090.apk
-
Size
1.8MB
-
MD5
7a33783b6908f03443d30643688d54c6
-
SHA1
ab2f85c703fa5e9ff59e28ecb0a621c06c29e530
-
SHA256
ba625262b247e4c79e729a83f53767c34fc0c25142eedbcc0e74f15d73c64090
-
SHA512
9110f44761156e117c8ad66a728ecfe166f84f6d5c5bfcca977fa1c2aa244e0613faa057793be15b3a7fa162afd8255ba3f3aa8cd21dd9a6d248c882c9d52ca3
Malware Config
Extracted
alienbot
http://testedwwh.xyz
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Makes use of the framework's Accessibility service. 1 IoCs
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
jbx.roagjksrlsxsmknhdrizttgrhs.fbf1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
-
jbx.roagjksrlsxsmknhdrizttgrhs.fbf2⤵
-
-
/system/bin/dex2oat2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
97e5b1a031761f8e6e738ddbc3e73d30
SHA1172e280d5ac63bbdfbcbf93aac3f979a461e3769
SHA256bfac6923f972a412f9de2a67f1a5775b52d27555f4bb1cc92efdcd27e48b6280
SHA512115c11c5524337b4327a6c4659a914f689a6bba99dd04fd7f191d406b42bff31fe1852a2766d42b29f09d7f38bbfb54bd6523f283e41882e26a6dcec68e8b65f
-
MD5
07df5c726b749e3728109d001f023e46
SHA10624d45b404fdfd796e4fa14cbcf3374bcbb0b02
SHA256065da766c074ddd8d91be3559f409151bafb54f4262b9078b8c64d94e9a1cc16
SHA51202d603a0a9cf60a106aa53be333fce7645ddb78aab68110adccdab120c8d21d1e6014ad17a4d7295bcbf151beff1aed3b4ed638bc9861e01730ee1d0daf5771e
-
MD5
97e5b1a031761f8e6e738ddbc3e73d30
SHA1172e280d5ac63bbdfbcbf93aac3f979a461e3769
SHA256bfac6923f972a412f9de2a67f1a5775b52d27555f4bb1cc92efdcd27e48b6280
SHA512115c11c5524337b4327a6c4659a914f689a6bba99dd04fd7f191d406b42bff31fe1852a2766d42b29f09d7f38bbfb54bd6523f283e41882e26a6dcec68e8b65f