Overview

overview

10

Static

static

7

8EF42748D5...01.apk

android_x86

10

8EF42748D5...01.apk

android_x64

10

8EF42748D5...01.apk

android_x64

Analysis

  • max time kernel
    609629s
  • max time network
    193s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 11:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8EF42748D57D163C6C8F519CD663B6C8EF28D2F1AFA527716CD2D40F4C4F5601.apk

  • Size

    1.8MB

  • MD5

    88982178e9df34bfcfd0b03d73c8c713

  • SHA1

    f33bcc2881f2fa274d2205dc23648449ceb23f61

  • SHA256

    8ef42748d57d163c6c8f519cd663b6c8ef28d2f1afa527716cd2d40f4c4f5601

  • SHA512

    3b85142303d1607e718b4658eed2ede5a3695af5a193d7a3f7c529df39d45fb9cd873989de171139296ef52ad0aeecc0507681790a858c77aa6cf77cb20cf910

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://18likveletcalistiranusom.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • gyjjnzuynoytqwsbmheodkojrik.cgrgloxtlzzugaindmabhp.nmjegswkuutjtt
    1⤵
    • Loads dropped Dex/Jar
    PID:6069
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6153
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6706
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7098
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7282
            • getprop ro.miui.ui.version.name
              2⤵
                PID:7322
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:7378

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/user/0/gyjjnzuynoytqwsbmheodkojrik.cgrgloxtlzzugaindmabhp.nmjegswkuutjtt/app_DynamicOptDex/YieIMdU.json
                Filesize

                710KB

                MD5

                4cfac28e6de420a67f47c16112a14ba5

                SHA1

                e92a353a9fc6764189fbf35b0eb011b8412aefe3

                SHA256

                9c31d977b4333bfe7727d1f44a2386685ea58dc7dc9e1eba6abd1d14c9404b2d

                SHA512

                c05cc9678e00952b47add83e4bcc5012e4542b9b4f99acfa3410ac1ce5b0216946965e4c00f7d59694165ff50f6c153356c23261a8a966f0bddf2c74d2d8debb

                Download Submit

              • /data/user/0/gyjjnzuynoytqwsbmheodkojrik.cgrgloxtlzzugaindmabhp.nmjegswkuutjtt/app_DynamicOptDex/YieIMdU.json
                Filesize

                710KB

                MD5

                1a2c6b59c2e35039736f07c45175793e

                SHA1

                106b97e48d61bb952d4b154bd91a38a6a6082ce0

                SHA256

                5e014f51504d2865151ca025a0660004cda6001e41fb82864059e365d69a0168

                SHA512

                aef8118e6ebf3084a4efe155788cc3e7a778b4af5fe9fb0a0edd102233cffdbdb4985d8c9846509d3f587dd3010b9a46fb0bab572370b8dab7c981d6074b392a

                Download Submit

              • /data/user/0/gyjjnzuynoytqwsbmheodkojrik.cgrgloxtlzzugaindmabhp.nmjegswkuutjtt/app_DynamicOptDex/YieIMdU.json
                Filesize

                710KB

                MD5

                1a2c6b59c2e35039736f07c45175793e

                SHA1

                106b97e48d61bb952d4b154bd91a38a6a6082ce0

                SHA256

                5e014f51504d2865151ca025a0660004cda6001e41fb82864059e365d69a0168

                SHA512

                aef8118e6ebf3084a4efe155788cc3e7a778b4af5fe9fb0a0edd102233cffdbdb4985d8c9846509d3f587dd3010b9a46fb0bab572370b8dab7c981d6074b392a

                Download Submit