Analysis
- max time kernel
2272166s - max time network
166s - platform
android_x64 - resource
android-x64-20220310-en - submitted
02/05/2022, 23:25
Static task
static1
Behavioral task
behavioral1
Sample
a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c.apk
- Size 1.3MB
- Sample220502-3en88aefcj
- SHA256 a4dfe580d7ecd6cc94773ef3d818eafd4f6451ee265340b3d67035a72e3c767c
- MD5 16bdcde29b3a91fff7226458e46a6630
- SHA1 57376c83bfa1a298c5c4c2303e779cd0fed94988
- SHA512 260eea3b3b1a69659a0103eb986cbfb02e1f3fded03dd16fe71d2037a00328fe24807db51c8cb309b8f1a050f891656867aacfd419c5e281423fde607e1fc22e
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Extracted
Family
-
alienbot
C2
-
http://uuaktoronuer.xyz
Signatures
- Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json 6187 meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json 6187 meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json
- Size 527KB
- SHA256 7a47947206dada441db8bb071eb8dcf7755fe7f808edbc2caeee2186e6855429
- MD5 bf849518394c4cdc5f0fc83c979fd867
- SHA1 47d52f80b76aed3c76413417cd09e87430fa80b8
- SHA512 53af6959f1902a0eeb6853b798d34bcf1712a2c82cbdf1d6ae2ea70060c7d3ed791820cee7e687463ac37f35c34a8babe9656137773b966878a6dd555ad6052e
- SSDEEP 12288:DG96ejETdUSqpM8QeoZHP1gHJEnKREM7iwoNBeM5JkEIEkjedFuoQnm:eJQTdFqpRQ39PGJEnKS9daE+Xm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json
- Size 527KB
- SHA256 932b514c9671d3b4c9157d5b7c2c8800e08739638302d28ff4502a9432b65bd8
- MD5 ccce12b859f9428e98a83e5e66af7743
- SHA1 1434530e89aca83f2460674b4d33f89c74b6318a
- SHA512 36c7542f7f7afa0e97462ffe441c804e85477ea6222876bc91b8adf78c326bb87e035fe7e92f5b3f605e228690c49ac43bf7f3fa4a90e9e2ba6157c92025f4be
- SSDEEP 6144:fE0RCoDSuqs+Yzaoq+6Hu3vwUua513zNJpnBiF4R2D7s9DYz+wrhOMniUlzg/sW2:WueYWQ6H6vwUVH5DnBOgMnl+uV
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/meouqozglhsxrochhosbasljxgn.roxaxxjnhyqymlyhli.ntznp/app_DynamicOptDex/AANWSdI.json
- Size 527KB
- SHA256 932b514c9671d3b4c9157d5b7c2c8800e08739638302d28ff4502a9432b65bd8
- MD5 ccce12b859f9428e98a83e5e66af7743
- SHA1 1434530e89aca83f2460674b4d33f89c74b6318a
- SHA512 36c7542f7f7afa0e97462ffe441c804e85477ea6222876bc91b8adf78c326bb87e035fe7e92f5b3f605e228690c49ac43bf7f3fa4a90e9e2ba6157c92025f4be
- SSDEEP 6144:fE0RCoDSuqs+Yzaoq+6Hu3vwUua513zNJpnBiF4R2D7s9DYz+wrhOMniUlzg/sW2:WueYWQ6H6vwUVH5DnBOgMnl+uV
- MD5 SHA1 SHA512 SSDEEP