Analysis

  • max time kernel
    600524s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 09:38

General

  • Target
    7DDE3353E679BD4EC0A5C8655D95EDB9A41E2A6C284ECE79E764FE91A709BA14.apk
  • Size 2.3MB
  • Sample220602-lmftdaegf2
  • SHA256 7dde3353e679bd4ec0a5c8655d95edb9a41e2a6c284ece79e764fe91a709ba14
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • alienbot

C2
  • http://abracadabra6.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • lrjdwnlfnrsjrh.kqtxlpsdmqlkxxre.xlpgxysehcskiwbrwaurejlwkm
    1⤵
    • Loads dropped Dex/Jar
    PID:6031

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        WRX.json

        • Path /data/user/0/lrjdwnlfnrsjrh.kqtxlpsdmqlkxxre.xlpgxysehcskiwbrwaurejlwkm/app_DynamicOptDex/WRX.json
        • Size 693KB
        • SHA256 ec6677ae919129722c52feabe29df80c12a4347beb4be48fc3a16576f3d13da1
        • MD5 SHA1 SHA512 SSDEEP

        WRX.json

        • Path /data/user/0/lrjdwnlfnrsjrh.kqtxlpsdmqlkxxre.xlpgxysehcskiwbrwaurejlwkm/app_DynamicOptDex/WRX.json
        • Size 693KB
        • SHA256 b9ac8c63c12276732e00ee9506b582f816dca0a5d08978c27917f94ff8c1bc70
        • MD5 SHA1 SHA512 SSDEEP

        WRX.json

        • Path /data/user/0/lrjdwnlfnrsjrh.kqtxlpsdmqlkxxre.xlpgxysehcskiwbrwaurejlwkm/app_DynamicOptDex/WRX.json
        • Size 693KB
        • SHA256 b9ac8c63c12276732e00ee9506b582f816dca0a5d08978c27917f94ff8c1bc70
        • MD5 SHA1 SHA512 SSDEEP