Overview

overview

10

Static

static

7

9975519E1A...C7.apk

android_x86

10

9975519E1A...C7.apk

android_x64

10

9975519E1A...C7.apk

android_x64

Analysis

  • max time kernel
    677153s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03-06-2022 06:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9975519E1AE9CEFFC6A7841B8C26FA356B98C0FD1E48DF80BAD49865066C28C7.apk

  • Size

    2.3MB

  • MD5

    1a3388bc2de001556f2ec1af473f8989

  • SHA1

    d7d74bdef5b6ab2d4478cfec4e0181feb155ed45

  • SHA256

    9975519e1ae9ceffc6a7841b8c26fa356b98c0fd1e48df80bad49865066c28c7

  • SHA512

    419a9afdb95fa5764d0667a834e69f862eddb6301b74ec23986f688a72792fc7dc26187dff9edfc7ee791664362abbaa94196c4ed452f133623fcec8c1d50e38

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://kucsas.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • idiherqibgwwakoxwy.tksptyldtghbfw.bnygioaufy
    1⤵
    • Loads dropped Dex/Jar
    PID:6271
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6346
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6498

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/idiherqibgwwakoxwy.tksptyldtghbfw.bnygioaufy/app_DynamicOptDex/bZoFML.json
        Filesize

        713KB

        MD5

        df1e9509ced3c76f4e60f93e2fb37f81

        SHA1

        3f970cf2a514e7f668ae3645a41d80ead1922588

        SHA256

        59da792f25dbde544145c489bce848eda9d4175701aec14f2f170cbbb2829ad7

        SHA512

        4d6e8969ea2483558e7cd0a81d11a045750f0f7616f60fc87059ba910ccd532d0bcf8f750f43599d7e8c28f881257fddf9ff636cf35fcd021b0111114790bb9c

        Download Submit

      • /data/user/0/idiherqibgwwakoxwy.tksptyldtghbfw.bnygioaufy/app_DynamicOptDex/bZoFML.json
        Filesize

        713KB

        MD5

        10a784a4bf5028a5332c9abd5b25089e

        SHA1

        3fdbfb8baf4428fcb2dd5e126af0ba3d8c8538d4

        SHA256

        cea01f1b9897a2f7290f0b06c21b3d966469c813c5d59cb109eec9c0b3770513

        SHA512

        8d610beb95c1fd354a95c4ff6a0ed25c592d4bd79db38bc392c2b9aaefbf34b5f464b9a58d2fa6c83c704b9ef4891d4b7b6d7847dceb95f69d69dcb21989bfc4

        Download Submit

      • /data/user/0/idiherqibgwwakoxwy.tksptyldtghbfw.bnygioaufy/app_DynamicOptDex/bZoFML.json
        Filesize

        713KB

        MD5

        10a784a4bf5028a5332c9abd5b25089e

        SHA1

        3fdbfb8baf4428fcb2dd5e126af0ba3d8c8538d4

        SHA256

        cea01f1b9897a2f7290f0b06c21b3d966469c813c5d59cb109eec9c0b3770513

        SHA512

        8d610beb95c1fd354a95c4ff6a0ed25c592d4bd79db38bc392c2b9aaefbf34b5f464b9a58d2fa6c83c704b9ef4891d4b7b6d7847dceb95f69d69dcb21989bfc4

        Download Submit

      • /data/user/0/idiherqibgwwakoxwy.tksptyldtghbfw.bnygioaufy/app_DynamicOptDex/oat/bZoFML.json.cur.prof
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        Download Submit