Overview

overview

10

Static

static

7

67130F843E...01.apk

android_x86

10

67130F843E...01.apk

android_x64

10

67130F843E...01.apk

android_x64

Analysis

  • max time kernel
    609152s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 11:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

  • Size

    1.8MB

  • MD5

    3b114ad5d6dc3c7b7a800e25994f14f4

  • SHA1

    5993356afbad23bf175837b75b573384ef224da9

  • SHA256

    67130f843ebf484c6a87002c8b52218864184e07bcc50227175df52bd23ca001

  • SHA512

    b0a1feb00a672a72bde9eac30e6a97eb1adc86c5c45e34bb56a0b4f5dde5f276f07223d67be02ba58e63ab7f66f20a88d38618644751c3aa7be466df4c287d56

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://keepgoingadamim.gripe

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • fpfjrkdyuhonyrbxbe.qdgumajrwfhrmtr.nylsioxr
    1⤵
    • Loads dropped Dex/Jar
    PID:6189
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6302
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6454

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/fpfjrkdyuhonyrbxbe.qdgumajrwfhrmtr.nylsioxr/app_DynamicOptDex/DtsSBt.json
        Filesize

        678KB

        MD5

        baa2768f68437e01bd21d1a15118dcd9

        SHA1

        e6065f205c0209dac6a83e5d0d8597f32ece129f

        SHA256

        3f767b31af7a63c54777d1a4c65b365751df4e9eb41cc7ec60f443b28d931984

        SHA512

        caa28b6f3880a7731bf161ba59c1438116588d36edf8c25d6ee9b9b98b5effd8e8edfb5de88483622922d32851a91796812da5f1c3e31dac0588ed5b2370a4c8

        Download Submit

      • /data/user/0/fpfjrkdyuhonyrbxbe.qdgumajrwfhrmtr.nylsioxr/app_DynamicOptDex/DtsSBt.json
        Filesize

        678KB

        MD5

        04e645197bc86aeba6c2ff822d66ced6

        SHA1

        6d9aa7ee96ad05d0bea71cad31995e4e56632d9b

        SHA256

        347adda0656e33731ce3b0ab4ff8acf10e26a2185561d9427844ed91a85ff427

        SHA512

        efe03e19a36261a02e52b929b419c2c738ad444daeb1f1bd109a4c64e756c51f0f0764bc362400b4f6528f6cb40f2fe855d8eb1889a1b80f23ee6e167eef10a8

        Download Submit

      • /data/user/0/fpfjrkdyuhonyrbxbe.qdgumajrwfhrmtr.nylsioxr/app_DynamicOptDex/DtsSBt.json
        Filesize

        678KB

        MD5

        04e645197bc86aeba6c2ff822d66ced6

        SHA1

        6d9aa7ee96ad05d0bea71cad31995e4e56632d9b

        SHA256

        347adda0656e33731ce3b0ab4ff8acf10e26a2185561d9427844ed91a85ff427

        SHA512

        efe03e19a36261a02e52b929b419c2c738ad444daeb1f1bd109a4c64e756c51f0f0764bc362400b4f6528f6cb40f2fe855d8eb1889a1b80f23ee6e167eef10a8

        Download Submit