Overview

overview

10

Static

static

7

441b75bbdb...70.apk

android_x86

10

441b75bbdb...70.apk

android_x64

10

441b75bbdb...70.apk

android_x64

10

Analysis

  • max time kernel
    4171190s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    25-05-2022 00:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    441b75bbdb00f1ed62c8dcba8265cdb0d8b65cacaf4e66517da35b8a1b5dc070.apk

  • Size

    1.9MB

  • MD5

    701dba6d0f33b3ecc1239a6746aa234d

  • SHA1

    ba120233d357f7336928e39cd3147eacf3c4aca9

  • SHA256

    441b75bbdb00f1ed62c8dcba8265cdb0d8b65cacaf4e66517da35b8a1b5dc070

  • SHA512

    ce83c7a9d6b81a5cf82b2e172046ba83427654f220bc21b49a1eba5c8fc969239b20bbfa5c372d28f94ab55dbff17e3d4beedfdf84423c2b19be0abe81df6d12

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://martiniidex.top

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    PID:6937
    • getprop ro.miui.ui.version.name
      2⤵
        PID:7063
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7171
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7221
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7278
            • getprop ro.miui.ui.version.name
              2⤵
                PID:7317
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:7347

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/oat/xyIRpc.json.cur.prof
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                Download Submit

              • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/xyIRpc.json
                Filesize

                628KB

                MD5

                d0f1b04a6811011798b7da64017be740

                SHA1

                3099ec2c53a928ec764dbe89925db2f15d3027c5

                SHA256

                9e2fa1adc49eb339455b666f4a20db5d94c01d7178054e8c5678b6181578a3e0

                SHA512

                e6a1b6607e74fcb40b34a2cd99880ec1a481e093c1a9cc6cb375253d01109e06f6ecdc9bb00435439697c30985a632b068ed1a7c7f1323b70fe1e952f51e9bf7

                Download Submit

              • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/xyIRpc.json
                Filesize

                628KB

                MD5

                89ebb321e07968f29b0256f21560d65e

                SHA1

                1b5cb98afa08b7d68c6aabc9dd5a92500e11989a

                SHA256

                2d2d7a2015ae69ee3ebe98fd719c79303d6a9c7d9423523e5422fd5180cb437f

                SHA512

                79344d56ad6704e87113b616c97bfa64a549715f0a4474890cbb484751f8a962841259792a009177be17649c9c7a4fe56ce44c7e7dc6f8f46069d1e31b9e7526

                Download Submit

              • /data/user/0/xutkfpbgoehwszfttnm.oywlcka.lzzglhguwlefubrlflfatpxtp/app_DynamicOptDex/xyIRpc.json
                Filesize

                628KB

                MD5

                89ebb321e07968f29b0256f21560d65e

                SHA1

                1b5cb98afa08b7d68c6aabc9dd5a92500e11989a

                SHA256

                2d2d7a2015ae69ee3ebe98fd719c79303d6a9c7d9423523e5422fd5180cb437f

                SHA512

                79344d56ad6704e87113b616c97bfa64a549715f0a4474890cbb484751f8a962841259792a009177be17649c9c7a4fe56ce44c7e7dc6f8f46069d1e31b9e7526

                Download Submit