Overview

overview

10

Static

static

7

017584fa4a...d4.apk

android_x86

10

017584fa4a...d4.apk

android_x64

10

017584fa4a...d4.apk

android_x64

Analysis

  • max time kernel
    3844238s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21/05/2022, 03:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4.apk

  • Size

    1.4MB

  • MD5

    af54d23662954dbf66a7d7ae75c0b2d8

  • SHA1

    01d5948dc4f82623842897e96148b773995118dc

  • SHA256

    017584fa4ae2e2b0f1176859a3e9744ed06371ec729b48d9767bbd13905caad4

  • SHA512

    756a06f6b2ea91a86c4c79ca136d79c8f34b8c898f7dbc6e992d03393e2ef74ca6999cac16eb4d51fa99da4c0d11e65a7e272e372a040cc60e6268c30f55e6e9

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://installerflas453873.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • rsoiogtjulaok.cieldreweq.hbdjtupunuq
    1⤵
    • Loads dropped Dex/Jar
    PID:6347

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/rsoiogtjulaok.cieldreweq.hbdjtupunuq/app_DynamicOptDex/MGefmeg.json
    Filesize

    691KB

    MD5

    74ca4c9a56e7b45bbe0d545e75272e8a

    SHA1

    9b7d6be31dcd20acef49157003ab9cbeda135280

    SHA256

    02919b2e83d08a197e236e4edd6ec4fd3ba37a4fb959a61b295d0fa005d966aa

    SHA512

    e1a24622bf79a1e8e7aca8940afd23b99dbdb11a4eb82afd597302f15593e40cd578a9f648e1c3a0bf06f4c4e42ad588201d1c9e65d1288636689b993b5ee71b

    Download Submit

  • /data/user/0/rsoiogtjulaok.cieldreweq.hbdjtupunuq/app_DynamicOptDex/MGefmeg.json
    Filesize

    691KB

    MD5

    b715617a03ecc75370e5ba7cd1656f25

    SHA1

    7606e1e1731da76fa84c423484d828965eeec16b

    SHA256

    5fab0ba886a5337f2a8e2f6466164e7b945b4008bd0caa9544b406b257e5dbd6

    SHA512

    eba29a59d856b7afc1b3e7057205fb17e5aee85f9830b2e5ce87ae00f78c672ccb81356c2cd9f2b131eec506183a31d9dccf10f44573e08f245e6d2b83fd3682

    Download Submit

  • /data/user/0/rsoiogtjulaok.cieldreweq.hbdjtupunuq/app_DynamicOptDex/MGefmeg.json
    Filesize

    691KB

    MD5

    b715617a03ecc75370e5ba7cd1656f25

    SHA1

    7606e1e1731da76fa84c423484d828965eeec16b

    SHA256

    5fab0ba886a5337f2a8e2f6466164e7b945b4008bd0caa9544b406b257e5dbd6

    SHA512

    eba29a59d856b7afc1b3e7057205fb17e5aee85f9830b2e5ce87ae00f78c672ccb81356c2cd9f2b131eec506183a31d9dccf10f44573e08f245e6d2b83fd3682

    Download Submit