Overview

overview

10

Static

static

7

441b75bbdb...70.apk

android_x86

10

441b75bbdb...70.apk

android_x64

10

441b75bbdb...70.apk

android_x64

10

Analysis

  • max time kernel
    4171204s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    25-05-2022 00:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    441b75bbdb00f1ed62c8dcba8265cdb0d8b65cacaf4e66517da35b8a1b5dc070.apk

  • Size

    1.9MB

  • MD5

    701dba6d0f33b3ecc1239a6746aa234d

  • SHA1

    ba120233d357f7336928e39cd3147eacf3c4aca9

  • SHA256

    441b75bbdb00f1ed62c8dcba8265cdb0d8b65cacaf4e66517da35b8a1b5dc070

  • SHA512

    ce83c7a9d6b81a5cf82b2e172046ba83427654f220bc21b49a1eba5c8fc969239b20bbfa5c372d28f94ab55dbff17e3d4beedfdf84423c2b19be0abe81df6d12

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://martiniidex.top

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp
    1⤵
    • Loads dropped Dex/Jar
    PID:6176
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6287
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7031

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/oat/xyIRpc.json.cur.prof
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        Download Submit

      • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/xyIRpc.json
        Filesize

        628KB

        MD5

        d0f1b04a6811011798b7da64017be740

        SHA1

        3099ec2c53a928ec764dbe89925db2f15d3027c5

        SHA256

        9e2fa1adc49eb339455b666f4a20db5d94c01d7178054e8c5678b6181578a3e0

        SHA512

        e6a1b6607e74fcb40b34a2cd99880ec1a481e093c1a9cc6cb375253d01109e06f6ecdc9bb00435439697c30985a632b068ed1a7c7f1323b70fe1e952f51e9bf7

        Download Submit

      • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/xyIRpc.json
        Filesize

        628KB

        MD5

        89ebb321e07968f29b0256f21560d65e

        SHA1

        1b5cb98afa08b7d68c6aabc9dd5a92500e11989a

        SHA256

        2d2d7a2015ae69ee3ebe98fd719c79303d6a9c7d9423523e5422fd5180cb437f

        SHA512

        79344d56ad6704e87113b616c97bfa64a549715f0a4474890cbb484751f8a962841259792a009177be17649c9c7a4fe56ce44c7e7dc6f8f46069d1e31b9e7526

        Download Submit

      • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/xyIRpc.json
        Filesize

        628KB

        MD5

        89ebb321e07968f29b0256f21560d65e

        SHA1

        1b5cb98afa08b7d68c6aabc9dd5a92500e11989a

        SHA256

        2d2d7a2015ae69ee3ebe98fd719c79303d6a9c7d9423523e5422fd5180cb437f

        SHA512

        79344d56ad6704e87113b616c97bfa64a549715f0a4474890cbb484751f8a962841259792a009177be17649c9c7a4fe56ce44c7e7dc6f8f46069d1e31b9e7526

        Download Submit