Analysis
-
max time kernel
609533s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
02/06/2022, 11:17
Static task
static1
Behavioral task
behavioral1
Sample
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
486AFD2192AA17F4E95DA012B549AB70CF2D250A6E7A12210010A6C413C7E2AE.apk
-
Size
306KB
-
MD5
63c10ff97b867eade1b841963801b662
-
SHA1
33062f6c1bcc468bf4a51296b8eeb08fb1a2a03e
-
SHA256
486afd2192aa17f4e95da012b549ab70cf2d250a6e7a12210010a6c413c7e2ae
-
SHA512
ec73125fea196e2360472e9f7789ba613638ed35780bfc8c697e02037293f96b1f91000693d6a91a4946997c9d6ae883e99486c46ab31bde43775cb7191d66cd
Malware Config
Extracted
alienbot
http://zesasar8.com
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
Processes
-
com.ilcyoqlbbgnsetby.vfzfnnzrc1⤵PID:6318
-
getprop ro.miui.ui.version.name2⤵PID:6449
-
-
getprop ro.miui.ui.version.name2⤵PID:6543
-
-
getprop ro.miui.ui.version.name2⤵PID:6590
-
-
getprop ro.miui.ui.version.name2⤵PID:6626
-
-
getprop ro.miui.ui.version.name2⤵PID:6680
-
-
getprop ro.miui.ui.version.name2⤵PID:6721
-
-
getprop ro.miui.ui.version.name2⤵PID:6767
-