Overview

overview

10

Static

static

7

7ab51fb206...1f.apk

android-9-x86

10

7ab51fb206...1f.apk

android-10-x64

10

7ab51fb206...1f.apk

android-11-x64

10

Analysis

  • max time kernel
    3210157s
  • max time network
    136s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system
  • submitted
    21-08-2022 07:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7ab51fb20608701fbceecffd076ca81f.apk

  • Size

    1.4MB

  • MD5

    7ab51fb20608701fbceecffd076ca81f

  • SHA1

    49011c5b76a07e4fdd310ce1310e727dcc068268

  • SHA256

    b76dc5d0e102e3c3ea30c6977114e98ab1198e7e8a6556487d375a198b647d7b

  • SHA512

    9b16f418e29ebedd957814285478e57bc254fa4615e13038da05c66d56ef7c78b0cc03a42c50af0cbd76730aca4b6a14cc670137a09520fda394ef0e5fb4ab22

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://aslaolmazdenemyardim.co.vu/

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.foot.aspect
    1⤵
    • Loads dropped Dex/Jar
    PID:4996
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6729
      • getprop ro.miui.ui.version.name
        2⤵
          PID:7155
        • getprop ro.miui.ui.version.name
          2⤵
            PID:7241
          • getprop ro.miui.ui.version.name
            2⤵
              PID:7387
            • getprop ro.miui.ui.version.name
              2⤵
                PID:7537
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:7620
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:7660

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/user/0/com.foot.aspect/app_DynamicOptDex/oat/sloF.json.cur.prof
                  MD5

                  d41d8cd98f00b204e9800998ecf8427e

                  SHA1

                  da39a3ee5e6b4b0d3255bfef95601890afd80709

                  SHA256

                  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                  SHA512

                  cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                  Download Submit

                • /data/user/0/com.foot.aspect/app_DynamicOptDex/sloF.json
                  Filesize

                  238KB

                  MD5

                  36d4db9a6de79d27ca1b42c4fb6d5b3c

                  SHA1

                  2905be23838a99ba6261aec086c27a82464be1ad

                  SHA256

                  855652c1ceaae0e3875635046287d56deba36aaeb882a682372ace6e64b81569

                  SHA512

                  3a98f50617a1e415921006e16e2c4a6053d311925b816b5cfbaa7d2e1eae6002db83c68f5c4c1549422a3475f3f023b0110a4e9c0ce9cba6d7068de03a9b02c4

                  Download Submit

                • /data/user/0/com.foot.aspect/app_DynamicOptDex/sloF.json
                  Filesize

                  483KB

                  MD5

                  e524fc1b16216ddd26a5984f1a0c139d

                  SHA1

                  53be0cda39429abec94f7292af2901786e55a5f6

                  SHA256

                  a4d9d9aff61762aef4afecfcc4de5c50eabf974d87f518fbeacfc50459bede1c

                  SHA512

                  fb1a42f5d3343558730551a96738f904c0c3bfe95abb2f8aa6a35ae8b4b92318f38080f3605cc3bd1e2533e9a1a8149c872952fde78c7c44e11a973590cac83f

                  Download Submit