Overview

overview

10

Static

static

7

8C8806DE86...DF.apk

android_x86

10

8C8806DE86...DF.apk

android_x64

10

8C8806DE86...DF.apk

android_x64

10

Analysis

  • max time kernel
    611635s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02-06-2022 11:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk

  • Size

    2.1MB

  • MD5

    c4a118a1dd6dd7182329449cf4faa60a

  • SHA1

    a36de5592e735ee578c24aedd0883e72c8eb95a5

  • SHA256

    8c8806de862133ede2eddd2a82751af95eb39e0dd732478cc70baa5bb2d6ebdf

  • SHA512

    77ade4851913d397ea238f60e42c7cdcbcadfc44ad67c6bdb805bf83e2b6146785a368f79ed8226489d86d0074fc5bd36c769f6ab2c87a21ec28a77a9f888ef4

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://oylebibokabattimben.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug
    1⤵
    • Loads dropped Dex/Jar
    PID:6190
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6306
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6420
        • getprop ro.miui.ui.version.name
          2⤵
            PID:6467
          • getprop ro.miui.ui.version.name
            2⤵
              PID:6523
            • getprop ro.miui.ui.version.name
              2⤵
                PID:6556
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:6602
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:6649

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/oat/ruX.json.cur.prof
                  MD5

                  d41d8cd98f00b204e9800998ecf8427e

                  SHA1

                  da39a3ee5e6b4b0d3255bfef95601890afd80709

                  SHA256

                  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                  SHA512

                  cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                  Download Submit

                • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/ruX.json
                  Filesize

                  700KB

                  MD5

                  a0f1409eed47d0ae2644e2958bf604cf

                  SHA1

                  7de1e6a3b6a612a9c5d24f9261267d1c508e7d21

                  SHA256

                  c1f32bb07764fd3d73bb0334ea9980d492143e6a5ffeec3c49a89928a9bf1f5e

                  SHA512

                  2cc7067f7bc775ad8cec37395b8aea143bd4df8aca3281878ccdb1ac2fc6795e963e8a25a90be5158e375bd777d505e8bddb4a971423cb060f6ad2b13bb47bc0

                  Download Submit

                • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/ruX.json
                  Filesize

                  700KB

                  MD5

                  2598f9354762678916739e421d0446f4

                  SHA1

                  af432cb2704286b815938d4c9f43611b24711879

                  SHA256

                  c6b8cd75dd214186b8782a2c7a7f382913b40211258a0b9cc2932f5a69146491

                  SHA512

                  18974a08e22cc356eb6ce3dfb8a847849dfb3caaf80ee941f9c7a70a90ff18510ebf45167c5b3c1584197f6e6d5e9cf40feaec5ba0db5ee6072a002439ede93a

                  Download Submit

                • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/ruX.json
                  Filesize

                  700KB

                  MD5

                  2598f9354762678916739e421d0446f4

                  SHA1

                  af432cb2704286b815938d4c9f43611b24711879

                  SHA256

                  c6b8cd75dd214186b8782a2c7a7f382913b40211258a0b9cc2932f5a69146491

                  SHA512

                  18974a08e22cc356eb6ce3dfb8a847849dfb3caaf80ee941f9c7a70a90ff18510ebf45167c5b3c1584197f6e6d5e9cf40feaec5ba0db5ee6072a002439ede93a

                  Download Submit