Overview

overview

10

Static

static

7

3382348F96...2E.apk

android_x86

10

3382348F96...2E.apk

android_x64

10

3382348F96...2E.apk

android_x64

Analysis

  • max time kernel
    676111s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03-06-2022 06:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3382348F9618058DDE3AACFFCB34982E.apk

  • Size

    1.5MB

  • MD5

    3382348f9618058dde3aacffcb34982e

  • SHA1

    afd02498459773d4c1d271214446fc7db0a5e49d

  • SHA256

    f57a44bec2f7af2da443f068edb0a743f9625ac3a9d686393bacb8e72274b5de

  • SHA512

    a7efa941966dc180b9d007b0bc05ef3178b0b02a2a971d5a07e070d0d26241ef484af7b3f21d6e0b4e2f01eddc60bc007190e4cf6405fe38f091c869924cb9ba

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://scargkanesiki.info/

http://adkfjsadlkgjasdlkjaslkgjargq0rg.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • irbqyuyjucec.xkypc.srowoc
    1⤵
    • Loads dropped Dex/Jar
    PID:6206
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6293
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7241
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7324
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7373

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
            Filesize

            357KB

            MD5

            98e1a67f7441e177f9665bb02c8b6f29

            SHA1

            243041498aefd160f351d1f2c38e5238f8aad148

            SHA256

            f592f92764ebd3f274b6ff68fe6ea2d9efa9ec10cb5c2e5f5033f840b034c40b

            SHA512

            0994ae3ac298cc81d727fe156ee8be38f3f00d6c1bc422bb930f7e5e70ebe8e6499cabadf6dee922a3b935f98fdbcb9c7606b6cea1aa2838a9c25b82adfdae52

            Download Submit

          • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
            Filesize

            357KB

            MD5

            0f64be9ef8fc13e31decfbf867c0635b

            SHA1

            cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0

            SHA256

            ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301

            SHA512

            1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334

            Download Submit

          • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
            Filesize

            357KB

            MD5

            0f64be9ef8fc13e31decfbf867c0635b

            SHA1

            cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0

            SHA256

            ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301

            SHA512

            1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334

            Download Submit

          • /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/oat/JkCIgr.json.cur.prof
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

            Download Submit