Overview

overview

10

Static

static

7

4D5764BE41...7F.apk

android_x86

4D5764BE41...7F.apk

android_x64

10

4D5764BE41...7F.apk

android_x64

Resubmissions

11/02/2025, 02:17

250211-cqpq1svpfw 10

03/06/2022, 06:31

220603-g98epabgc4 10

Analysis

  • max time kernel
    679706s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03/06/2022, 06:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4D5764BE41FD0E422C7FE7222BAA5169D162AB89A48A00C3512BF401514BC07F.apk

  • Size

    1.8MB

  • MD5

    1cb9d2ecaca4d972d09cca05dcffb519

  • SHA1

    491fff2df906b86fe493d9613494c350a94bd125

  • SHA256

    4d5764be41fd0e422c7fe7222baa5169d162ab89a48a00c3512bf401514bc07f

  • SHA512

    8ff3e80a62f2c97ffb6f6fd9dc5d839de728b928a31c8d45bf14fe73db4e08cca7aa772b6436ece91685487d6f641027da1b2cd7a7d440cf3b474b2bcebf1420

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://tayyipbey31.com

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • nhtoylgqwkblqaa.etpfnimh.igaohffeeamwoemzgxedpymxpe
    1⤵
    • Loads dropped Dex/Jar
    PID:6026
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6164
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6354

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/nhtoylgqwkblqaa.etpfnimh.igaohffeeamwoemzgxedpymxpe/app_DynamicOptDex/hSrcTRq.json
        Filesize

        698KB

        MD5

        1bf6b813ee95cb23b0702b0faf829d3d

        SHA1

        b8c5879e925f33ca19f1d05ec5eebb0c834f25e7

        SHA256

        19fde71ace596430c1e9f5b963429de7acca7d47e3870e4c801c1713467011aa

        SHA512

        1f4d4c1de7a6ad5bbee035a525d4640de66c0758d176798681771ddd44650aed576eeaaf741d111b6cfa9875b1b5a2401a9ff0d8a9eccf5467547a9f7f110097

        Download Submit

      • /data/user/0/nhtoylgqwkblqaa.etpfnimh.igaohffeeamwoemzgxedpymxpe/app_DynamicOptDex/hSrcTRq.json
        Filesize

        698KB

        MD5

        bc5845a7907e5856f418adf9cc1efbb3

        SHA1

        5cf82f3f397e153a822c78cb1df6b740331065fe

        SHA256

        506d95179d2329473199d2c280cd0d02c67346afde1be5319666fdbf6f6028da

        SHA512

        915e1d74dfef31073d3dd1f87b72d5619ba81fc8c5bb6e69c21cc98acafc1b70bc4156c6b3c900a7e6c0f05321f15bbdd5bee2857f5d708d4ff61999481d0625

        Download Submit

      • /data/user/0/nhtoylgqwkblqaa.etpfnimh.igaohffeeamwoemzgxedpymxpe/app_DynamicOptDex/hSrcTRq.json
        Filesize

        698KB

        MD5

        bc5845a7907e5856f418adf9cc1efbb3

        SHA1

        5cf82f3f397e153a822c78cb1df6b740331065fe

        SHA256

        506d95179d2329473199d2c280cd0d02c67346afde1be5319666fdbf6f6028da

        SHA512

        915e1d74dfef31073d3dd1f87b72d5619ba81fc8c5bb6e69c21cc98acafc1b70bc4156c6b3c900a7e6c0f05321f15bbdd5bee2857f5d708d4ff61999481d0625

        Download Submit