Overview

overview

10

Static

static

7

0f3c4594f7...2f.apk

android_x86

10

0f3c4594f7...2f.apk

android_x64

10

0f3c4594f7...2f.apk

android_x64

Analysis

  • max time kernel
    607420s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02-06-2022 11:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0f3c4594f761570c38484ac37c0ec52f.apk

  • Size

    1.2MB

  • MD5

    0f3c4594f761570c38484ac37c0ec52f

  • SHA1

    78f85545e92515f3b016d28df7d39828259056f0

  • SHA256

    64f9d97353ef326a58622f329097a282a5a09e0ab636136fb9cb3ab716f5664d

  • SHA512

    344acff9322a72279bb1183378feea438575cc440fc6063dde61e27dcd7fbd92ae9a76b342035e86c384350f64cdea6a33560e419e6a955d4fc51794c54d0006

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://fxancc4fp4.site

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • xtfyqftuwxhcp.dnxhlssmkbwtkitdxwuhzmiz.szadohuobgujqujnuaznwwht
    1⤵
    • Loads dropped Dex/Jar
    PID:6308
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6447
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6533

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/xtfyqftuwxhcp.dnxhlssmkbwtkitdxwuhzmiz.szadohuobgujqujnuaznwwht/app_DynamicOptDex/EaaGfe.json
        Filesize

        493KB

        MD5

        9d22ce43b6cd6cfadfe0a0a4ae2fa9a9

        SHA1

        ed8f4cc20b653c70d9c54a73ef0fd12b90e8cdb7

        SHA256

        0767dba685a392eb56e2e661e02223e8b9a13ef718a4503ba7f28c82f32f9c10

        SHA512

        a46cdb90ecb6fe7f038738b810f80b5480e40c3d8cb90a2f7dafb02339e40af157bb54bbad98696d95c461297a4268468f01a67f7f4ca60522c133bdd1f8bcc8

        Download Submit

      • /data/user/0/xtfyqftuwxhcp.dnxhlssmkbwtkitdxwuhzmiz.szadohuobgujqujnuaznwwht/app_DynamicOptDex/EaaGfe.json
        Filesize

        493KB

        MD5

        84f673f013c88f1d22d4dca9a326ccc6

        SHA1

        fe3dd10e9764c70914a318374da696244c43a045

        SHA256

        e280412c1cf95ee7d90c789e8c39cd3225ee7cc9fc5732e1c0489f2a3c40f389

        SHA512

        2ca531d45906be66ef5cae426d17f42ba107e28e75c1cd176d48d4e2bd15156d2955b7488cf4ed57ef9ab013d9727ae596e7d65af845c8e0aa8527ed9a023780

        Download Submit

      • /data/user/0/xtfyqftuwxhcp.dnxhlssmkbwtkitdxwuhzmiz.szadohuobgujqujnuaznwwht/app_DynamicOptDex/EaaGfe.json
        Filesize

        493KB

        MD5

        84f673f013c88f1d22d4dca9a326ccc6

        SHA1

        fe3dd10e9764c70914a318374da696244c43a045

        SHA256

        e280412c1cf95ee7d90c789e8c39cd3225ee7cc9fc5732e1c0489f2a3c40f389

        SHA512

        2ca531d45906be66ef5cae426d17f42ba107e28e75c1cd176d48d4e2bd15156d2955b7488cf4ed57ef9ab013d9727ae596e7d65af845c8e0aa8527ed9a023780

        Download Submit

      • /data/user/0/xtfyqftuwxhcp.dnxhlssmkbwtkitdxwuhzmiz.szadohuobgujqujnuaznwwht/app_DynamicOptDex/oat/EaaGfe.json.cur.prof
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        Download Submit