Overview

overview

10

Static

static

7

4da346aca8...ad.apk

android_x86

10

4da346aca8...ad.apk

android_x64

10

4da346aca8...ad.apk

android_x64

Analysis

  • max time kernel
    4148875s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    24-05-2022 17:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4da346aca80044922e3acbf5442d3249362b1fe419ae13b65c09bbb7eaad90ad.apk

  • Size

    452KB

  • MD5

    af7c823715657780f02d6318b6176dd0

  • SHA1

    aed949f2bf2a7796c3dbbb65fc8a141a83ba280c

  • SHA256

    4da346aca80044922e3acbf5442d3249362b1fe419ae13b65c09bbb7eaad90ad

  • SHA512

    6311aceda91ac02e5edb3e9f3f636db6e4af651f508800ff6d11ab38610f6fd17cdc41de3f39f9955e49930c52b6bcdec9260abd368e574729cf48965f4855c5

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://berilumran.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.pxfh.spchnl
    1⤵
    • Loads dropped Dex/Jar
    PID:6323
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6446
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6538

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.pxfh.spchnl/app_apkprotector_dex/classes-v1.bin
        Filesize

        473KB

        MD5

        408b5580fd1ef5db50f8723e1938aed8

        SHA1

        61d2d5d76fc808975946d2c6cc8007784f9b440c

        SHA256

        88fe5d0f6b484e0309d94a75686d2196605e4c6ff657e25059f728fcb05d6e7d

        SHA512

        2729ccf20aaa1b8accde400b1cec477074aca051217bf35882479d30a6c7c8f50bac2ba6e4e28f0e0c05ac313dd115681ff6fc87b708ba15ae3e6cf3739029e3

        Download Submit

      • /data/user/0/com.pxfh.spchnl/app_apkprotector_dex/classes-v1.bin
        Filesize

        473KB

        MD5

        408b5580fd1ef5db50f8723e1938aed8

        SHA1

        61d2d5d76fc808975946d2c6cc8007784f9b440c

        SHA256

        88fe5d0f6b484e0309d94a75686d2196605e4c6ff657e25059f728fcb05d6e7d

        SHA512

        2729ccf20aaa1b8accde400b1cec477074aca051217bf35882479d30a6c7c8f50bac2ba6e4e28f0e0c05ac313dd115681ff6fc87b708ba15ae3e6cf3739029e3

        Download Submit

      • /data/user/0/com.pxfh.spchnl/app_apkprotector_dex/classes-v1.bin
        Filesize

        473KB

        MD5

        408b5580fd1ef5db50f8723e1938aed8

        SHA1

        61d2d5d76fc808975946d2c6cc8007784f9b440c

        SHA256

        88fe5d0f6b484e0309d94a75686d2196605e4c6ff657e25059f728fcb05d6e7d

        SHA512

        2729ccf20aaa1b8accde400b1cec477074aca051217bf35882479d30a6c7c8f50bac2ba6e4e28f0e0c05ac313dd115681ff6fc87b708ba15ae3e6cf3739029e3

        Download Submit