Analysis
- max time kernel
611909s - max time network
162s - platform
android_x64 - resource
android-x64-20220310-en - submitted
02/06/2022, 11:27
Static task
static1
Behavioral task
behavioral1
Sample
db026fe524d1ce98de04374ff374fdf0.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
db026fe524d1ce98de04374ff374fdf0.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
db026fe524d1ce98de04374ff374fdf0.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target db026fe524d1ce98de04374ff374fdf0.apk
- Size 1.9MB
- Sample220602-nkd8waffe5
- SHA256 dc215663af92d41f40f36088ec1b850b81092ea94a4a061a9ce88178daee965a
- MD5 db026fe524d1ce98de04374ff374fdf0
- SHA1 def50bc6a9d970846659c00fb529446af06483c7
- SHA512 6102b8b355e30aa89befbd146564e00ac54ec2aea4f8ecc114edca226f6ffbf5210fe0484a20fa4b0a24098430450550d7ef7cef6acf72f8e94051b2630721cf
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Extracted
Family
-
alienbot
C2
-
http://servicesc.xyz
Signatures
- Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr/app_DynamicOptDex/jeSk.json 6362 msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr /data/user/0/msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr/app_DynamicOptDex/jeSk.json 6362 msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr/app_DynamicOptDex/jeSk.json
- Size 723KB
- SHA256 3687b59d4b8a3ecaa164f5f04301303ce0192fdc2c296df20b3dc209cc3d2776
- MD5 a974446e49181fbf30c4614737abc596
- SHA1 42a9e894f2652854067d90ddaa3adafee7967dc7
- SHA512 dfa34829c2271969d7ae9a9ea67371abac312fc0db6518b43b2ff69dc8aa3c1532f2f0d3e51c130699301be6c28b363a4f1f11f040d3f1e27ed1ef194d11e060
- SSDEEP 12288:1cRRmibVUnnMpQr5ZopT9Ij4AjAlHZGbPDNugir77OdT1jbmJTeQZyG5hu+NrI1l:qRRfO/56pT9q9jA70Nigjb47NNrI1UQ9
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr/app_DynamicOptDex/jeSk.json
- Size 723KB
- SHA256 83c6d3e8bef45f67a9dcdc5f648cea621fb08d45da0421fbb383b14187cc1042
- MD5 076e71f327de667a8c616f0ad4dae1ba
- SHA1 171b0aaab6aa53e564c5328ee1af5fb416327399
- SHA512 0f2ddab6850803912b2c05fb960e8d8e5c2effc047321e28e54bef6194750be8625c0670fbd48c83ca03e901cb35a0bb200d19b199a64206ee7383d09613ff0a
- SSDEEP 12288:LLGbqJkpw9gkof6Hyvgu1UF+28vJVU7TDRWJoQ2XiTcx5/wI5XN:+bOIYuyB8vJoR9OIz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/msqqqwokejyfwim.bzsotef.ftonpdptfkkfhcjxkrr/app_DynamicOptDex/jeSk.json
- Size 723KB
- SHA256 83c6d3e8bef45f67a9dcdc5f648cea621fb08d45da0421fbb383b14187cc1042
- MD5 076e71f327de667a8c616f0ad4dae1ba
- SHA1 171b0aaab6aa53e564c5328ee1af5fb416327399
- SHA512 0f2ddab6850803912b2c05fb960e8d8e5c2effc047321e28e54bef6194750be8625c0670fbd48c83ca03e901cb35a0bb200d19b199a64206ee7383d09613ff0a
- SSDEEP 12288:LLGbqJkpw9gkof6Hyvgu1UF+28vJVU7TDRWJoQ2XiTcx5/wI5XN:+bOIYuyB8vJoR9OIz
- MD5 SHA1 SHA512 SSDEEP