Analysis
-
max time kernel
609320s -
max time network
173s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
02-06-2022 11:16
Static task
static1
Behavioral task
behavioral1
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
98D85E9E46043780FC863A30D149505E377C82F2D668AFAE4FB4C647BF07A9AF.apk
-
Size
456KB
-
MD5
b72c6108be79544049a01a1e35769f9d
-
SHA1
8e32645c945c37fe68d42dd439a65dc6efae8e5f
-
SHA256
98d85e9e46043780fc863a30d149505e377c82f2d668afae4fb4c647bf07a9af
-
SHA512
383761c5584a25626c8ab5ece2c723110f32cae412fedb4f8036cbd82e13c23ea08e1f56adfc21ef845c1f38083fffb21ff614fc5ed05b5c77ea657925556d59
Malware Config
Extracted
alienbot
http://kremmilk.xyz
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
Processes
-
com.hcgetl.nysgtxkveqdzrpb1⤵PID:6176
-
getprop ro.miui.ui.version.name2⤵PID:6369
-
-
getprop ro.miui.ui.version.name2⤵PID:7082
-
-
getprop ro.miui.ui.version.name2⤵PID:7306
-
-
getprop ro.miui.ui.version.name2⤵PID:7349
-
-
getprop ro.miui.ui.version.name2⤵PID:7493
-
-
getprop ro.miui.ui.version.name2⤵PID:7539
-