Analysis
-
max time kernel
3869256s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21-05-2022 12:22
Static task
static1
Behavioral task
behavioral1
Sample
9e086db9154b5ad08cc53410cf4bc7d962f3fb57c2474f2f6a1c2dba6342b800.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
9e086db9154b5ad08cc53410cf4bc7d962f3fb57c2474f2f6a1c2dba6342b800.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
9e086db9154b5ad08cc53410cf4bc7d962f3fb57c2474f2f6a1c2dba6342b800.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
9e086db9154b5ad08cc53410cf4bc7d962f3fb57c2474f2f6a1c2dba6342b800.apk
-
Size
1.6MB
-
MD5
9b3a2b42fba1c7047c79d2f729362849
-
SHA1
4f21d0a4402875c909a63fa04b52021251b6e602
-
SHA256
9e086db9154b5ad08cc53410cf4bc7d962f3fb57c2474f2f6a1c2dba6342b800
-
SHA512
be90a61180797f6740ba837138789701575b3762e689b926df4d172355d91cb482195122ab88a6b5311d7a3b849c6dd0596bd5acc56e65d16066af27724c5fba
Malware Config
Extracted
alienbot
http://fe2rasd32f.top
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/uclaecruyuogabirsxtw.htswmxyj.croimbocnagwqbbc/app_DynamicOptDex/dswZ.json 6020 uclaecruyuogabirsxtw.htswmxyj.croimbocnagwqbbc /data/user/0/uclaecruyuogabirsxtw.htswmxyj.croimbocnagwqbbc/app_DynamicOptDex/dswZ.json 6020 uclaecruyuogabirsxtw.htswmxyj.croimbocnagwqbbc
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
678KB
MD511fce54deb348a314a4eae4c1a4da9cd
SHA1d106e8c9488be8fbee5fc50847f005df10177277
SHA2566d1ef460d832a3fba02ac95dd42446cc1f7407d143bee91480b16702b730ffd5
SHA512ed409b99a1b0e187034cd6cbfacc1a9c7a73db2e725f2aef70dfc8b00c1f5337cb89259aae56c760896165a8e2b099fac1ecfa4d863981b75fcb840acd083cb4
-
Filesize
678KB
MD564246215fa949747b9c08e79b75f1ce3
SHA1e9132246a626c0362c96920f9efda939693465b6
SHA256ea0c3436ef34603f0a9781a6217194ee26a81792e9227e702ff793939a286b8b
SHA512ac4b21bd13b7c315701238526215539ae14f82ecfa84c8baf0e46e20854bf1732ea065600813d6a63e006bb2fc6cbad6b6bc8369904c0fd0c79167cefb753e3d
-
Filesize
678KB
MD564246215fa949747b9c08e79b75f1ce3
SHA1e9132246a626c0362c96920f9efda939693465b6
SHA256ea0c3436ef34603f0a9781a6217194ee26a81792e9227e702ff793939a286b8b
SHA512ac4b21bd13b7c315701238526215539ae14f82ecfa84c8baf0e46e20854bf1732ea065600813d6a63e006bb2fc6cbad6b6bc8369904c0fd0c79167cefb753e3d