Analysis
- max time kernel
3763751s - max time network
166s - platform
android_x64 - resource
android-x64-20220310-en - submitted
20/05/2022, 06:14
Static task
static1
Behavioral task
behavioral1
Sample
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f.apk
- Size 1.6MB
- Sample220520-gzttjsdfb6
- SHA256 b6005705d0f28741cb4f4ae53211b7b7027ea1eafb7056731528e7559a3d468f
- MD5 a789dfd6a75368fa6d219ab6e9d65d2c
- SHA1 e901187bfa142ccacb3eb1a84cf5ef9dcee2d3ef
- SHA512 fbb296a7c38b74eb1cd358b3cfeed4c81722ad40d221230b08163bbefd653707cd61887ab7064f7b6c9c6eefb89e04bcceed4adfe5eeb688353e33cd3df9d236
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Extracted
Family
-
alienbot
C2
-
http://fillimillidilli.top
Signatures
- Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs/app_DynamicOptDex/uoi.json 6189 rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs /data/user/0/rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs/app_DynamicOptDex/uoi.json 6189 rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs/app_DynamicOptDex/uoi.json
- Size 672KB
- SHA256 3406492a63a735ffa7dbdc42e7bb4c26f42c24b199094708073b0227b1f98c9f
- MD5 c004c6427cd88ce78a99af9a4b67a39c
- SHA1 0063eb5e1f250e718dac13f809a90305efae3970
- SHA512 9d2d458410fab27582c63eeeae303681cafc2a219df516933e03509abaa3a463d2086459d958766bb6ecf9792d534825c4e3338e8d521ca50a28e4fd0a391449
- SSDEEP 12288:I6dPz3yN++ddvhL/zWOIXKJ8GpC3AaiJf+NT7QYPnR5UM6emdVNFIV4hL9dA/4mE:xPzizvhSXQ5C3Aaf57QknRv6BOmhL8/w
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs/app_DynamicOptDex/uoi.json
- Size 672KB
- SHA256 7db0f4596cb266ed9e74b739f0e78589fbe6724d008008649a2737bf8964f082
- MD5 989105d7c4ed445968cac4a75183c8f3
- SHA1 738985a76ef5c0312286d91e6e05e711ab5082be
- SHA512 e4fc056f824e7b1148cd9b78caaa36ef636e01828643a781b74b21e0b290bd18c14181fec7548dccae1f47a0b697a834ea434fd24a20c62bf4d7f512d2fb03c7
- SSDEEP 12288:Fmh2dSwiBNzo/b6H9vCe7afkyThxhVCGMFqj2QlGv:o2dSwiqq6wyd99CEg
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/rab.fxzjjqzctrhtrgpyrenpxoqy.uafqs/app_DynamicOptDex/uoi.json
- Size 672KB
- SHA256 7db0f4596cb266ed9e74b739f0e78589fbe6724d008008649a2737bf8964f082
- MD5 989105d7c4ed445968cac4a75183c8f3
- SHA1 738985a76ef5c0312286d91e6e05e711ab5082be
- SHA512 e4fc056f824e7b1148cd9b78caaa36ef636e01828643a781b74b21e0b290bd18c14181fec7548dccae1f47a0b697a834ea434fd24a20c62bf4d7f512d2fb03c7
- SSDEEP 12288:Fmh2dSwiBNzo/b6H9vCe7afkyThxhVCGMFqj2QlGv:o2dSwiqq6wyd99CEg
- MD5 SHA1 SHA512 SSDEEP