Analysis
-
max time kernel
3844041s -
max time network
162s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21/05/2022, 03:43
Static task
static1
Behavioral task
behavioral1
Sample
64845311c2e7ae9d027175b4b1443d9e039b97aeb1488785935dfe037ad884bd.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
64845311c2e7ae9d027175b4b1443d9e039b97aeb1488785935dfe037ad884bd.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
64845311c2e7ae9d027175b4b1443d9e039b97aeb1488785935dfe037ad884bd.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
64845311c2e7ae9d027175b4b1443d9e039b97aeb1488785935dfe037ad884bd.apk
-
Size
2.3MB
-
MD5
fb9cfbcb8f613960e091d03f62e52078
-
SHA1
8002498665d45758aa057bef17f91d23ca5d8df8
-
SHA256
64845311c2e7ae9d027175b4b1443d9e039b97aeb1488785935dfe037ad884bd
-
SHA512
aaa7365373909a1765f97bcc154db6d273085f44c61e46a487246d21d952c0d3f94dc5182becaedffb138c05918240a2aef5d9e202c74451e00255de5e72a97d
Malware Config
Extracted
alienbot
http://cxmarcellsat.top
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/kwiejizn.zqxbkadrygwhfzfczh.kuxiqsedpsmgankftgmlozcbu/app_DynamicOptDex/uM.json 6382 kwiejizn.zqxbkadrygwhfzfczh.kuxiqsedpsmgankftgmlozcbu /data/user/0/kwiejizn.zqxbkadrygwhfzfczh.kuxiqsedpsmgankftgmlozcbu/app_DynamicOptDex/uM.json 6382 kwiejizn.zqxbkadrygwhfzfczh.kuxiqsedpsmgankftgmlozcbu
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
726KB
MD5723dbe59e6ed87beec8e3b9c96c68e0a
SHA1079fb9db6b9c7393918300a7afcc6cfca684ebe9
SHA256efd9aaa0e4a79ca3f9293cde54d928e052031db7689614571bcfd169ed45eb3d
SHA512dc3feedbbb9cf8305bb2eebfba96267203cd13556b570501d46f010e784a9a9385902fe8e20112587a81403d0b2672cacfc27ba79c11741c98036ef3b7d30458
-
Filesize
726KB
MD59d13bcce32673c487e2e0f18f99e7537
SHA1166387b50ba791dceadffde3761b71a25a4ffc3a
SHA2568dc68892fab2c7422413f3a313c198ca7e1f30a8ee8ad469b3a41ab39311798d
SHA51289a900fc9946fe63ff117dfef8dda464ca6f86eb05f0c9a2dcc120623068de06b2475dd5630f6acce3ff30256ad9b7c0818119d9bef27554570b3287834ce000
-
Filesize
726KB
MD59d13bcce32673c487e2e0f18f99e7537
SHA1166387b50ba791dceadffde3761b71a25a4ffc3a
SHA2568dc68892fab2c7422413f3a313c198ca7e1f30a8ee8ad469b3a41ab39311798d
SHA51289a900fc9946fe63ff117dfef8dda464ca6f86eb05f0c9a2dcc120623068de06b2475dd5630f6acce3ff30256ad9b7c0818119d9bef27554570b3287834ce000