Overview

overview

10

Static

static

7

67D2F328C5...44.apk

android_x86

10

67D2F328C5...44.apk

android_x64

10

67D2F328C5...44.apk

android_x64

Analysis

  • max time kernel
    604786s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 10:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    67D2F328C59F4A2866006CDD18CA81C9E3F882D585FC42B244FF397293087C44.apk
  • Size 2.3MB
  • Sample220602-mpff3aafck
  • SHA256 67d2f328c59f4a2866006cdd18ca81c9e3f882d585fc42b244ff397293087c44
  • MD5 SHA1 SHA512
Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

  • alienbot

C2

  • http://ukalasey9.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf
    1⤵
    • Loads dropped Dex/Jar
    PID:6039
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6179
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6533
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7292

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              OO.json
              • Path /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
              • Size 706KB
              • SHA256 4eba0bb2141a6f6d6f62e10c2f1c01ae770ab2041da4329b718c2aa2f21ce6bb
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              OO.json
              • Path /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
              • Size 706KB
              • SHA256 0242de382adfa4be23d52722eb2e8e679fa9d5475af52a546ddea08ea182b772
              • MD5 SHA1 SHA512 SSDEEP
              Download

              OO.json
              • Path /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
              • Size 706KB
              • SHA256 0242de382adfa4be23d52722eb2e8e679fa9d5475af52a546ddea08ea182b772
              • MD5 SHA1 SHA512 SSDEEP
              Download