Analysis
- max time kernel
2762625s - max time network
182s - platform
android_x64 - resource
android-x64-20220621-en - submitted
27/06/2022, 10:11
Static task
static1
Behavioral task
behavioral1
Sample
3382348F9618058DDE3AACFFCB34982E.apk
Resource
android-x86-arm-20220621-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3382348F9618058DDE3AACFFCB34982E.apk
Resource
android-x64-20220621-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
3382348F9618058DDE3AACFFCB34982E.apk
Resource
android-x64-arm64-20220621-en
0 signatures
0 seconds
General
- Target 3382348F9618058DDE3AACFFCB34982E.apk
- Size 1.5MB
- Sample220627-l77gtsadbn
- SHA256 f57a44bec2f7af2da443f068edb0a743f9625ac3a9d686393bacb8e72274b5de
- MD5 3382348f9618058dde3aacffcb34982e
- SHA1 afd02498459773d4c1d271214446fc7db0a5e49d
- SHA512 a7efa941966dc180b9d007b0bc05ef3178b0b02a2a971d5a07e070d0d26241ef484af7b3f21d6e0b4e2f01eddc60bc007190e4cf6405fe38f091c869924cb9ba
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Extracted
Family
-
alienbot
C2
-
http://scargkanesiki.info/
-
http://adkfjsadlkgjasdlkjaslkgjargq0rg.xyz
Signatures
- Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json 6210 irbqyuyjucec.xkypc.srowoc /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json 6210 irbqyuyjucec.xkypc.srowoc
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
- Size 357KB
- SHA256 f592f92764ebd3f274b6ff68fe6ea2d9efa9ec10cb5c2e5f5033f840b034c40b
- MD5 98e1a67f7441e177f9665bb02c8b6f29
- SHA1 243041498aefd160f351d1f2c38e5238f8aad148
- SHA512 0994ae3ac298cc81d727fe156ee8be38f3f00d6c1bc422bb930f7e5e70ebe8e6499cabadf6dee922a3b935f98fdbcb9c7606b6cea1aa2838a9c25b82adfdae52
- SSDEEP 6144:mKH6ETyZTmfEztrBZK8WcRGE01sLOV1SQv8uVW7hh9JtdXZStNmbwwk:mW6YamktdZi+02LOjNXW7HXtdGmb/k
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
- Size 357KB
- SHA256 ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301
- MD5 0f64be9ef8fc13e31decfbf867c0635b
- SHA1 cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0
- SHA512 1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334
- SSDEEP 6144:AigoeqjcjjrvOnjlTyB8lShxYhv0RX894JUIS0og:AJv+F+1hLXZdh
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/irbqyuyjucec.xkypc.srowoc/app_DynamicOptDex/JkCIgr.json
- Size 357KB
- SHA256 ebcdce55f409e5c4ed10144749f5b82bf0d94e4ee715595aa4a267f05b05c301
- MD5 0f64be9ef8fc13e31decfbf867c0635b
- SHA1 cb6c3e8378a55ca9f502ba4f74e3e3c2aaee63a0
- SHA512 1abb8b80eb406fe34e0a609b2b4049a07a4e413cc49c60f754899aa652b072a0d358f6cae2f0ba69b526daaa596fe2aebd432cc05e9b95ab21eba8bc39a23334
- SSDEEP 6144:AigoeqjcjjrvOnjlTyB8lShxYhv0RX894JUIS0og:AJv+F+1hLXZdh
- MD5 SHA1 SHA512 SSDEEP