Analysis

  • max time kernel
    2272166s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/05/2022, 23:25

General

  • Target
    a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c.apk
  • Size 1.3MB
  • Sample220502-3en88aefcj
  • SHA256 a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • alienbot

C2
  • http://uuaktoronuer.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp
    1⤵
    • Loads dropped Dex/Jar
    PID:6187

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AANWSdI.json

        • Path /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json
        • Size 527KB
        • SHA256 7a47947206dada441db8bb071eb8dcf7755fe7f808edbc2caeee2186e6855429
        • MD5 SHA1 SHA512 SSDEEP

        AANWSdI.json

        • Path /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json
        • Size 527KB
        • SHA256 932b514c9671d3b4c9157d5b7c2c8800e08739638302d28ff4502a9432b65bd8
        • MD5 SHA1 SHA512 SSDEEP

        AANWSdI.json

        • Path /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json
        • Size 527KB
        • SHA256 932b514c9671d3b4c9157d5b7c2c8800e08739638302d28ff4502a9432b65bd8
        • MD5 SHA1 SHA512 SSDEEP