Overview

overview

10

Static

static

7

67D2F328C5...44.apk

android_x86

10

67D2F328C5...44.apk

android_x64

10

67D2F328C5...44.apk

android_x64

Analysis

  • max time kernel
    608515s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02-06-2022 11:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67D2F328C59F4A2866006CDD18CA81C9E3F882D585FC42B244FF397293087C44.apk

  • Size

    2.3MB

  • MD5

    3efa6d294bd8115fcd1b228fbb388a44

  • SHA1

    11440309458acdce2514b531ea1057f4a8ed04c1

  • SHA256

    67d2f328c59f4a2866006cdd18ca81c9e3f882d585fc42b244ff397293087c44

  • SHA512

    c4b3ff7287dc7fc7c7359c8dd8ffb4c2eb0dc39a0f5d3305aeb69225d54b0dd15272d0cdc5086bb79d18a05f22e06b48481fc8b96c55087304693551265c8075

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://ukalasey9.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf
    1⤵
    • Loads dropped Dex/Jar
    PID:6284
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6377
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6467

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
        Filesize

        706KB

        MD5

        e9646addf858cb8fef1340cf602b54c5

        SHA1

        5b88752ec68102c6f53869c5fc528e0767a0d8f1

        SHA256

        4eba0bb2141a6f6d6f62e10c2f1c01ae770ab2041da4329b718c2aa2f21ce6bb

        SHA512

        be2dc2dfef19e265c3569211248e8ec43a69c2ee8413735f4249c55be3cc87d2163361792a15e444be890fed8563e1bf3c2576bdf80b015565bc210e11da31ad

        Download Submit

      • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
        Filesize

        706KB

        MD5

        eed7eac54814ff6acec44d5a14a1a4f9

        SHA1

        c80b000cc27762330e7fb7216f6dcc626675e9e7

        SHA256

        0242de382adfa4be23d52722eb2e8e679fa9d5475af52a546ddea08ea182b772

        SHA512

        4f3dfa5d653c7ce20328c950ea87b2e3fd6f03722d305cdad0ea708142131b994efccb64c3e0d51b512bd1ade0bf9ac71964f86f1644e92248da8efae57d6889

        Download Submit

      • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
        Filesize

        706KB

        MD5

        eed7eac54814ff6acec44d5a14a1a4f9

        SHA1

        c80b000cc27762330e7fb7216f6dcc626675e9e7

        SHA256

        0242de382adfa4be23d52722eb2e8e679fa9d5475af52a546ddea08ea182b772

        SHA512

        4f3dfa5d653c7ce20328c950ea87b2e3fd6f03722d305cdad0ea708142131b994efccb64c3e0d51b512bd1ade0bf9ac71964f86f1644e92248da8efae57d6889

        Download Submit

      • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/oat/OO.json.cur.prof
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        Download Submit