Overview

overview

10

Static

static

7

FE23B30A92...A0.apk

android_x86

10

FE23B30A92...A0.apk

android_x64

10

FE23B30A92...A0.apk

android_x64

10

Analysis

  • max time kernel
    612179s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02-06-2022 11:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FE23B30A9296477557F027D4710E81EB1B08D65A1A83B6D81A4ED6128ED6E2A0.apk

  • Size

    1.5MB

  • MD5

    b8328a55e1c340c1b4c7ca622ad79649

  • SHA1

    fcc39b953d047b4cc9e553e0b28ce5410b4f5244

  • SHA256

    fe23b30a9296477557f027d4710e81eb1b08d65a1a83b6d81a4ed6128ed6e2a0

  • SHA512

    1ab9ce5bdc0ea49b1f3d023954388d3e97e09820a6ec438fd422c613167bbd6bd0fb4ebae109e94331776d29149dcca938353bb0f567a80ebd401c87e88849cf

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://kryll.ug

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • hdjro.nzaqrgffealnhmorwihd.mfukiybfx
    1⤵
    • Loads dropped Dex/Jar
    PID:6189
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6296
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6385
        • getprop ro.miui.ui.version.name
          2⤵
            PID:6431
          • getprop ro.miui.ui.version.name
            2⤵
              PID:6453
            • getprop ro.miui.ui.version.name
              2⤵
                PID:6481
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:6508
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:6540
                  • getprop ro.miui.ui.version.name
                    2⤵
                      PID:6584
                    • getprop ro.miui.ui.version.name
                      2⤵
                        PID:6608
                      • getprop ro.miui.ui.version.name
                        2⤵
                          PID:6632
                        • getprop ro.miui.ui.version.name
                          2⤵
                            PID:6652
                          • getprop ro.miui.ui.version.name
                            2⤵
                              PID:6675
                            • getprop ro.miui.ui.version.name
                              2⤵
                                PID:6700
                              • getprop ro.miui.ui.version.name
                                2⤵
                                  PID:6742
                                • getprop ro.miui.ui.version.name
                                  2⤵
                                    PID:6765
                                  • getprop ro.miui.ui.version.name
                                    2⤵
                                      PID:6787
                                    • getprop ro.miui.ui.version.name
                                      2⤵
                                        PID:6808

                                    Network

                                    MITRE ATT&CK Matrix

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • /data/user/0/hdjro.nzaqrgffealnhmorwihd.mfukiybfx/app_DynamicOptDex/ZE.json
                                      Filesize

                                      774KB

                                      MD5

                                      2db9448a09e5ed5aae287bbbb541057b

                                      SHA1

                                      ca0d5fdad470b52c82080b1f6e27a25a6e0f5aa7

                                      SHA256

                                      0cbbae3152607da974a7bd7858d16dba730eaefcbe4b8a3ab5ee0ff4aa9ec068

                                      SHA512

                                      bbe3c4d7f6cab901d3e0658dea4b2efec0504670656643e1bf36d3ee691bff8a50bebed33f7dc08631ad9fa46402d7b785a8913986a727b57cb87671ac62d357

                                      Download Submit

                                    • /data/user/0/hdjro.nzaqrgffealnhmorwihd.mfukiybfx/app_DynamicOptDex/ZE.json
                                      Filesize

                                      774KB

                                      MD5

                                      ba6f86b43c9d0a34cfaac67f933146d6

                                      SHA1

                                      efd9b877345c9e8185a3dd49886068807c830632

                                      SHA256

                                      f943d6ec087bd9b7447bda11ccf88e511572cfbc6e977c19095788cc51087075

                                      SHA512

                                      dc3da533a0cdac582c966aa173fd9da12b69ee57b151d7d05ef96070fa9e3481570674d8dda00c299cc5d162d8747eeb55181b289a48c0f420329c89e5d0b43c

                                      Download Submit

                                    • /data/user/0/hdjro.nzaqrgffealnhmorwihd.mfukiybfx/app_DynamicOptDex/ZE.json
                                      Filesize

                                      774KB

                                      MD5

                                      ba6f86b43c9d0a34cfaac67f933146d6

                                      SHA1

                                      efd9b877345c9e8185a3dd49886068807c830632

                                      SHA256

                                      f943d6ec087bd9b7447bda11ccf88e511572cfbc6e977c19095788cc51087075

                                      SHA512

                                      dc3da533a0cdac582c966aa173fd9da12b69ee57b151d7d05ef96070fa9e3481570674d8dda00c299cc5d162d8747eeb55181b289a48c0f420329c89e5d0b43c

                                      Download Submit