Overview

overview

10

Static

static

7

7DCB987D39...82.apk

android_x86

7DCB987D39...82.apk

android_x64

10

7DCB987D39...82.apk

android_x64

10

Analysis

  • max time kernel
    679479s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03/06/2022, 06:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7DCB987D39106EBB91CDE38CDB87E43377963014722A4D49B2C49370AD54AE82.apk

  • Size

    2.4MB

  • MD5

    3516d7b0d815d8c48dd6785c1b885e4c

  • SHA1

    af9d581f7ab4871c6dde28e0bd277ac370e67396

  • SHA256

    7dcb987d39106ebb91cde38cdb87e43377963014722a4d49b2c49370ad54ae82

  • SHA512

    ddcedf17501d7c5fd004c32d377cf8429bc116acda3c9b5ab0928f757072bd7a7e75b050d601f3fd18549bb5804373d047704c68763beaaaf6c31e1b15c10040

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://perohi21.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • lkwzr.nqbmmkomdijrxzuyzhmqtsz.bmpczafrei
    1⤵
    • Loads dropped Dex/Jar
    PID:6162
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6420
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7282
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7383
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7563
            • getprop ro.miui.ui.version.name
              2⤵
                PID:7603
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:7640
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:7681

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/user/0/lkwzr.nqbmmkomdijrxzuyzhmqtsz.bmpczafrei/app_DynamicOptDex/Kyk.json
                  Filesize

                  741KB

                  MD5

                  9a50331ca013d3490f29a6d332394abb

                  SHA1

                  0a41cedc0a8288a2ba1b8ec2c8fcc48ccc061fcb

                  SHA256

                  136a06e4d715455a817a70ab6b8162e187b224e11041a73b5e14e9ea6d8d3551

                  SHA512

                  d004b02652ae4c260aaa71fc6a771fd1e4281166e24860f5db34e0bc8f38de826220064325ecde28fd4824d6c0a05b6b8f7dac3e3de5f551c45a645f949d1398

                  Download Submit

                • /data/user/0/lkwzr.nqbmmkomdijrxzuyzhmqtsz.bmpczafrei/app_DynamicOptDex/Kyk.json
                  Filesize

                  741KB

                  MD5

                  5eec4c66cd3b761348a9a8dc665afd6a

                  SHA1

                  f1d8c01316c5d522ff2e1847835a6b5ee8cd50bb

                  SHA256

                  ee39b5b0bd3584c8e5ee8ac84e97887323f7cb7fb336b3c54fac18b7e8f20747

                  SHA512

                  319cfba47d0111c02de98454c64931d1e7827aa8a2912d6d836f52d6bf0ef710ed9ca4ef8aa51eab18e1467ada87a1ca7c072bbacde4d04607a7317146e396be

                  Download Submit

                • /data/user/0/lkwzr.nqbmmkomdijrxzuyzhmqtsz.bmpczafrei/app_DynamicOptDex/Kyk.json
                  Filesize

                  741KB

                  MD5

                  5eec4c66cd3b761348a9a8dc665afd6a

                  SHA1

                  f1d8c01316c5d522ff2e1847835a6b5ee8cd50bb

                  SHA256

                  ee39b5b0bd3584c8e5ee8ac84e97887323f7cb7fb336b3c54fac18b7e8f20747

                  SHA512

                  319cfba47d0111c02de98454c64931d1e7827aa8a2912d6d836f52d6bf0ef710ed9ca4ef8aa51eab18e1467ada87a1ca7c072bbacde4d04607a7317146e396be

                  Download Submit