Overview

overview

10

Static

static

7

7ab51fb206...1f.apk

android-9-x86

10

7ab51fb206...1f.apk

android-10-x64

10

7ab51fb206...1f.apk

android-11-x64

10

Analysis

  • max time kernel
    3210167s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system
  • submitted
    21-08-2022 07:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7ab51fb20608701fbceecffd076ca81f.apk

  • Size

    1.4MB

  • MD5

    7ab51fb20608701fbceecffd076ca81f

  • SHA1

    49011c5b76a07e4fdd310ce1310e727dcc068268

  • SHA256

    b76dc5d0e102e3c3ea30c6977114e98ab1198e7e8a6556487d375a198b647d7b

  • SHA512

    9b16f418e29ebedd957814285478e57bc254fa4615e13038da05c66d56ef7c78b0cc03a42c50af0cbd76730aca4b6a14cc670137a09520fda394ef0e5fb4ab22

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://aslaolmazdenemyardim.co.vu/

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.foot.aspect
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:4405
    • getprop ro.miui.ui.version.name
      2⤵
        PID:5855
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6122
        • getprop ro.miui.ui.version.name
          2⤵
            PID:6164
          • getprop ro.miui.ui.version.name
            2⤵
              PID:6477
            • getprop ro.miui.ui.version.name
              2⤵
                PID:6516
              • getprop ro.miui.ui.version.name
                2⤵
                  PID:6595

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/user/0/com.foot.aspect/app_DynamicOptDex/sloF.json
                Filesize

                238KB

                MD5

                36d4db9a6de79d27ca1b42c4fb6d5b3c

                SHA1

                2905be23838a99ba6261aec086c27a82464be1ad

                SHA256

                855652c1ceaae0e3875635046287d56deba36aaeb882a682372ace6e64b81569

                SHA512

                3a98f50617a1e415921006e16e2c4a6053d311925b816b5cfbaa7d2e1eae6002db83c68f5c4c1549422a3475f3f023b0110a4e9c0ce9cba6d7068de03a9b02c4

                Download Submit

              • /data/user/0/com.foot.aspect/app_DynamicOptDex/sloF.json
                Filesize

                483KB

                MD5

                e524fc1b16216ddd26a5984f1a0c139d

                SHA1

                53be0cda39429abec94f7292af2901786e55a5f6

                SHA256

                a4d9d9aff61762aef4afecfcc4de5c50eabf974d87f518fbeacfc50459bede1c

                SHA512

                fb1a42f5d3343558730551a96738f904c0c3bfe95abb2f8aa6a35ae8b4b92318f38080f3605cc3bd1e2533e9a1a8149c872952fde78c7c44e11a973590cac83f

                Download Submit