Overview

overview

10

Static

static

7

67D2F328C5...44.apk

android_x86

10

67D2F328C5...44.apk

android_x64

10

67D2F328C5...44.apk

android_x64

Analysis

  • max time kernel
    675867s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03/06/2022, 06:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67D2F328C59F4A2866006CDD18CA81C9E3F882D585FC42B244FF397293087C44.apk

  • Size

    2.3MB

  • MD5

    3efa6d294bd8115fcd1b228fbb388a44

  • SHA1

    11440309458acdce2514b531ea1057f4a8ed04c1

  • SHA256

    67d2f328c59f4a2866006cdd18ca81c9e3f882d585fc42b244ff397293087c44

  • SHA512

    c4b3ff7287dc7fc7c7359c8dd8ffb4c2eb0dc39a0f5d3305aeb69225d54b0dd15272d0cdc5086bb79d18a05f22e06b48481fc8b96c55087304693551265c8075

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://ukalasey9.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf
    1⤵
    • Loads dropped Dex/Jar
    PID:6166

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
    Filesize

    706KB

    MD5

    e9646addf858cb8fef1340cf602b54c5

    SHA1

    5b88752ec68102c6f53869c5fc528e0767a0d8f1

    SHA256

    4eba0bb2141a6f6d6f62e10c2f1c01ae770ab2041da4329b718c2aa2f21ce6bb

    SHA512

    be2dc2dfef19e265c3569211248e8ec43a69c2ee8413735f4249c55be3cc87d2163361792a15e444be890fed8563e1bf3c2576bdf80b015565bc210e11da31ad

    Download Submit

  • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
    Filesize

    706KB

    MD5

    eed7eac54814ff6acec44d5a14a1a4f9

    SHA1

    c80b000cc27762330e7fb7216f6dcc626675e9e7

    SHA256

    0242de382adfa4be23d52722eb2e8e679fa9d5475af52a546ddea08ea182b772

    SHA512

    4f3dfa5d653c7ce20328c950ea87b2e3fd6f03722d305cdad0ea708142131b994efccb64c3e0d51b512bd1ade0bf9ac71964f86f1644e92248da8efae57d6889

    Download Submit

  • /data/user/0/ombuylaehfkkyrbdli.lijnwihlodoiaadpsg.lsyneuwfijf/app_DynamicOptDex/OO.json
    Filesize

    706KB

    MD5

    eed7eac54814ff6acec44d5a14a1a4f9

    SHA1

    c80b000cc27762330e7fb7216f6dcc626675e9e7

    SHA256

    0242de382adfa4be23d52722eb2e8e679fa9d5475af52a546ddea08ea182b772

    SHA512

    4f3dfa5d653c7ce20328c950ea87b2e3fd6f03722d305cdad0ea708142131b994efccb64c3e0d51b512bd1ade0bf9ac71964f86f1644e92248da8efae57d6889

    Download Submit