Analysis
-
max time kernel
4079555s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm -
submitted
13-02-2022 12:50
General
-
Target
342a9f13097e57efc2324b1db53f77b058c3734d51448c497f543ad003201555.apk
-
Size
2.2MB
-
MD5
d19df565e9c5d661b8bfbc6283936f75
-
SHA1
d5fb04491de0eb596bb9ec01dd5b271d72bae87b
-
SHA256
342a9f13097e57efc2324b1db53f77b058c3734d51448c497f543ad003201555
-
SHA512
624369a6aa2cdebf68d53691bcf843bfd7b96ead86096a850772f4d953fa87b998f11d2e21d7401952ce8fcfd686bfde4b8f87dd1fb356808cd1199ea804d4fd
Malware Config
Extracted
alienbot
http://xasmascon771.icu
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
okqfjhhtlohmgupciyhmoigta.fpt.yuddsjkkctjfmchocuqssqpiopy1⤵
- Loads dropped Dex/Jar
-
okqfjhhtlohmgupciyhmoigta.fpt.yuddsjkkctjfmchocuqssqpiopy2⤵
-
-
/system/bin/dex2oat2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
6bee1015382020e24268f53840336d89
SHA1324abeb29c2d5adb3c4aba8d45d4ef1ac824d01d
SHA256a57b1c5fa3f6106b72b9a5f5c562d4805b058cd375b59e6ee3ab68e0a2a64e16
SHA51220a814ccac6277a952f356b57bb354c654968e04872d80471d73dc14277546b3bb08eeab549db44c07b7ec4d7d3b97e70fac60fa59acfa56c670702b3a64e6bd
-
MD5
db665c3895f9419b99661018425ba551
SHA1fda6491bcbf7529928c96efda60399782a04b472
SHA2563662291f1beffcc9b32037fa743be340944c9fc0062c3b3202555f013455e099
SHA5121709eaef7a36452e4bc0a32aa33725a97b86eb8e3bbbb3348970630bf8701e84d5778fbe05da12fdfd2c408f1d9f42eec4b18eff7b4fc11c5085baa435e031af
-
MD5
6bee1015382020e24268f53840336d89
SHA1324abeb29c2d5adb3c4aba8d45d4ef1ac824d01d
SHA256a57b1c5fa3f6106b72b9a5f5c562d4805b058cd375b59e6ee3ab68e0a2a64e16
SHA51220a814ccac6277a952f356b57bb354c654968e04872d80471d73dc14277546b3bb08eeab549db44c07b7ec4d7d3b97e70fac60fa59acfa56c670702b3a64e6bd