Overview

overview

10

Static

static

7

3382348F96...2E.apk

android_x86

10

3382348F96...2E.apk

android_x64

10

3382348F96...2E.apk

android_x64

10

Analysis

  • max time kernel
    611931s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02-06-2022 11:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3382348F9618058DDE3AACFFCB34982E.apk

  • Size

    1.5MB

  • MD5

    3382348f9618058dde3aacffcb34982e

  • SHA1

    afd02498459773d4c1d271214446fc7db0a5e49d

  • SHA256

    f57a44bec2f7af2da443f068edb0a743f9625ac3a9d686393bacb8e72274b5de

  • SHA512

    a7efa941966dc180b9d007b0bc05ef3178b0b02a2a971d5a07e070d0d26241ef484af7b3f21d6e0b4e2f01eddc60bc007190e4cf6405fe38f091c869924cb9ba

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://scargkanesiki.info/

http://adkfjsadlkgjasdlkjaslkgjargq0rg.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • irbqyuyjucec.xkypc.srowoc
    1⤵
    • Loads dropped Dex/Jar
    PID:6025
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6161
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6230

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
        Filesize

        357KB

        MD5

        98e1a67f7441e177f9665bb02c8b6f29

        SHA1

        243041498aefd160f351d1f2c38e5238f8aad148

        SHA256

        f592f92764ebd3f274b6ff68fe6ea2d9efa9ec10cb5c2e5f5033f840b034c40b

        SHA512

        0994ae3ac298cc81d727fe156ee8be38f3f00d6c1bc422bb930f7e5e70ebe8e6499cabadf6dee922a3b935f98fdbcb9c7606b6cea1aa2838a9c25b82adfdae52

        Download Submit

      • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
        Filesize

        357KB

        MD5

        0f64be9ef8fc13e31decfbf867c0635b

        SHA1

        cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0

        SHA256

        ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301

        SHA512

        1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334

        Download Submit

      • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
        Filesize

        357KB

        MD5

        0f64be9ef8fc13e31decfbf867c0635b

        SHA1

        cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0

        SHA256

        ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301

        SHA512

        1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334

        Download Submit