Overview

overview

10

Static

static

7

45f5fa9427...a5.apk

android_x86

10

45f5fa9427...a5.apk

android_x64

10

45f5fa9427...a5.apk

android_x64

10

Analysis

  • max time kernel
    676778s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03/06/2022, 06:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    45f5fa9427331e6a9d6ed2d8cdbaada5.apk
  • Size 1.8MB
  • Sample220603-gz8mpsbbf6
  • SHA256 d89e08db5af347be72f1307186638aaa062a8de45a808f57dce85bc83c94059e
  • MD5 SHA1 SHA512
Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

  • alienbot

C2

  • http://goldegrillz.top

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • jqnqflkhnljnob.koikkyrhqcmk.xqqzefaodtxghxkbahtnbld
    1⤵
    • Loads dropped Dex/Jar
    PID:6281

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gsmPAq.json
        • Path /data/user/0/jqnqflkhnljnob.koikkyrhqcmk.xqqzefaodtxghxkbahtnbld/app_DynamicOptDex/gsmPAq.json
        • Size 588KB
        • SHA256 98d9ba93fc1eb7a6e0c91daf5f7be82df7606d99c33d120755f2a800fca686c0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gsmPAq.json
        • Path /data/user/0/jqnqflkhnljnob.koikkyrhqcmk.xqqzefaodtxghxkbahtnbld/app_DynamicOptDex/gsmPAq.json
        • Size 588KB
        • SHA256 a401a49a5716bf0aedee4a66a3bf159184bd5ce324f08ec76ae1bbd02e2bdf6e
        • MD5 SHA1 SHA512 SSDEEP
        Download

        gsmPAq.json
        • Path /data/user/0/jqnqflkhnljnob.koikkyrhqcmk.xqqzefaodtxghxkbahtnbld/app_DynamicOptDex/gsmPAq.json
        • Size 588KB
        • SHA256 a401a49a5716bf0aedee4a66a3bf159184bd5ce324f08ec76ae1bbd02e2bdf6e
        • MD5 SHA1 SHA512 SSDEEP
        Download