Overview

overview

10

Static

static

7

3382348F96...2E.apk

android_x86

10

3382348F96...2E.apk

android_x64

10

3382348F96...2E.apk

android_x64

10

Analysis

  • max time kernel
    608385s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    02-06-2022 11:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3382348F9618058DDE3AACFFCB34982E.apk

  • Size

    1.5MB

  • MD5

    3382348f9618058dde3aacffcb34982e

  • SHA1

    afd02498459773d4c1d271214446fc7db0a5e49d

  • SHA256

    f57a44bec2f7af2da443f068edb0a743f9625ac3a9d686393bacb8e72274b5de

  • SHA512

    a7efa941966dc180b9d007b0bc05ef3178b0b02a2a971d5a07e070d0d26241ef484af7b3f21d6e0b4e2f01eddc60bc007190e4cf6405fe38f091c869924cb9ba

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://scargkanesiki.info/

http://adkfjsadlkgjasdlkjaslkgjargq0rg.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • irbqyuyjucec.xkypc.srowoc
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    PID:7014
    • getprop ro.miui.ui.version.name
      2⤵
        PID:7123
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7249
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7292
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7350
            • getprop ro.miui.ui.version.name
              2⤵
                PID:7384
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:7416
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:7453

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
                  Filesize

                  357KB

                  MD5

                  98e1a67f7441e177f9665bb02c8b6f29

                  SHA1

                  243041498aefd160f351d1f2c38e5238f8aad148

                  SHA256

                  f592f92764ebd3f274b6ff68fe6ea2d9efa9ec10cb5c2e5f5033f840b034c40b

                  SHA512

                  0994ae3ac298cc81d727fe156ee8be38f3f00d6c1bc422bb930f7e5e70ebe8e6499cabadf6dee922a3b935f98fdbcb9c7606b6cea1aa2838a9c25b82adfdae52

                  Download Submit

                • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
                  Filesize

                  357KB

                  MD5

                  0f64be9ef8fc13e31decfbf867c0635b

                  SHA1

                  cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0

                  SHA256

                  ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301

                  SHA512

                  1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334

                  Download Submit

                • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
                  Filesize

                  357KB

                  MD5

                  0f64be9ef8fc13e31decfbf867c0635b

                  SHA1

                  cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0

                  SHA256

                  ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301

                  SHA512

                  1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334

                  Download Submit