Overview

overview

10

Static

static

7

16b3b4b41c...84.apk

android_x86

10

16b3b4b41c...84.apk

android_x64

10

16b3b4b41c...84.apk

android_x64

10

Analysis

  • max time kernel
    3821463s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    20/05/2022, 23:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    16b3b4b41cdb2f415c09a7c7a486f8a3542abaa6cd17a41c80ed1b1bc7a81884.apk
  • Size 2.0MB
  • Sample220520-2982fabdhm
  • SHA256 16b3b4b41cdb2f415c09a7c7a486f8a3542abaa6cd17a41c80ed1b1bc7a81884
  • MD5 SHA1 SHA512
Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

  • alienbot

C2

  • http://coulcoul.top/

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • tqhngfl.lyafndlhdlhcljijnmatq.fbncxwydzrpiggwiiwmarg
    1⤵
    • Loads dropped Dex/Jar
    PID:6295
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6379
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6469
        • getprop ro.miui.ui.version.name
          2⤵
            PID:6513
          • getprop ro.miui.ui.version.name
            2⤵
              PID:6564
            • getprop ro.miui.ui.version.name
              2⤵
                PID:6600
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:6653
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:6703

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      Qck.json
                      • Path /data/user/0/tqhngfl.lyafndlhdlhcljijnmatq.fbncxwydzrpiggwiiwmarg/app_DynamicOptDex/Qck.json
                      • Size 644KB
                      • SHA256 f4ea9d5991935841e172af4549431c24834bb4b65cc1944f50ef5978ea35754b
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      Qck.json
                      • Path /data/user/0/tqhngfl.lyafndlhdlhcljijnmatq.fbncxwydzrpiggwiiwmarg/app_DynamicOptDex/Qck.json
                      • Size 644KB
                      • SHA256 0e4cd86a4e5351d1532051cd3dc479e1b618e1fc430e023bc91f873e7f0e3ace
                      • MD5 SHA1 SHA512 SSDEEP
                      Download

                      Qck.json
                      • Path /data/user/0/tqhngfl.lyafndlhdlhcljijnmatq.fbncxwydzrpiggwiiwmarg/app_DynamicOptDex/Qck.json
                      • Size 644KB
                      • SHA256 0e4cd86a4e5351d1532051cd3dc479e1b618e1fc430e023bc91f873e7f0e3ace
                      • MD5 SHA1 SHA512 SSDEEP
                      Download