Overview

overview

10

Static

static

7

8C8806DE86...DF.apk

android_x86

10

8C8806DE86...DF.apk

android_x64

10

8C8806DE86...DF.apk

android_x64

10

Analysis

  • max time kernel
    607929s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    02-06-2022 11:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8C8806DE862133EDE2EDDD2A82751AF95EB39E0DD732478CC70BAA5BB2D6EBDF.apk

  • Size

    2.1MB

  • MD5

    c4a118a1dd6dd7182329449cf4faa60a

  • SHA1

    a36de5592e735ee578c24aedd0883e72c8eb95a5

  • SHA256

    8c8806de862133ede2eddd2a82751af95eb39e0dd732478cc70baa5bb2d6ebdf

  • SHA512

    77ade4851913d397ea238f60e42c7cdcbcadfc44ad67c6bdb805bf83e2b6146785a368f79ed8226489d86d0074fc5bd36c769f6ab2c87a21ec28a77a9f888ef4

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://oylebibokabattimben.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:7064
    • getprop ro.miui.ui.version.name
      2⤵
        PID:7169
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7229
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7338
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7371
            • getprop ro.miui.ui.version.name
              2⤵
                PID:7408
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:7457

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/oat/ruX.json.cur.prof
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                Download Submit

              • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/ruX.json
                Filesize

                700KB

                MD5

                a0f1409eed47d0ae2644e2958bf604cf

                SHA1

                7de1e6a3b6a612a9c5d24f9261267d1c508e7d21

                SHA256

                c1f32bb07764fd3d73bb0334ea9980d492143e6a5ffeec3c49a89928a9bf1f5e

                SHA512

                2cc7067f7bc775ad8cec37395b8aea143bd4df8aca3281878ccdb1ac2fc6795e963e8a25a90be5158e375bd777d505e8bddb4a971423cb060f6ad2b13bb47bc0

                Download Submit

              • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/ruX.json
                Filesize

                700KB

                MD5

                2598f9354762678916739e421d0446f4

                SHA1

                af432cb2704286b815938d4c9f43611b24711879

                SHA256

                c6b8cd75dd214186b8782a2c7a7f382913b40211258a0b9cc2932f5a69146491

                SHA512

                18974a08e22cc356eb6ce3dfb8a847849dfb3caaf80ee941f9c7a70a90ff18510ebf45167c5b3c1584197f6e6d5e9cf40feaec5ba0db5ee6072a002439ede93a

                Download Submit

              • /data/user/0/kaufcdbonmliysryrdoau.aerajrgbecibrzrydm.pyprsxmsyakxhhkug/app_DynamicOptDex/ruX.json
                Filesize

                700KB

                MD5

                2598f9354762678916739e421d0446f4

                SHA1

                af432cb2704286b815938d4c9f43611b24711879

                SHA256

                c6b8cd75dd214186b8782a2c7a7f382913b40211258a0b9cc2932f5a69146491

                SHA512

                18974a08e22cc356eb6ce3dfb8a847849dfb3caaf80ee941f9c7a70a90ff18510ebf45167c5b3c1584197f6e6d5e9cf40feaec5ba0db5ee6072a002439ede93a

                Download Submit