Analysis
- max time kernel
4079747s - max time network
175s - platform
android_x64 - resource
android-x64 - submitted
13/02/2022, 12:51
General
- Target 163c2cff8cd941dbce727de2df9df5fdfaaddde8f6d3db86270e2abf7e0ea19f.apk
- Size 2.2MB
- Sample220213-p3h58acadn
- SHA256 163c2cff8cd941dbce727de2df9df5fdfaaddde8f6d3db86270e2abf7e0ea19f
Score
10/10
Malware Config
Extracted
Family
-
alienbot
C2
-
http://fsadkafasdkfka.xyz
Signatures
- Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
- Checks Qemu related system properties. 1 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw1⤵
- Checks Qemu related system properties.
- Loads dropped Dex/Jar
-
ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw2⤵
-
-
getprop2⤵
-
-
ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw2⤵
-
-
getprop2⤵
-
-
ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw2⤵
-
-
getprop2⤵
-
-
ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw2⤵
-