Analysis
-
max time kernel
2426247s -
max time network
145s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
-
submitted
20-12-2023 07:21
General
-
Target
8ef42748d57d163c6c8f519cd663b6c8ef28d2f1afa527716cd2d40f4c4f5601.apk
-
Size
1.8MB
-
MD5
88982178e9df34bfcfd0b03d73c8c713
-
SHA1
f33bcc2881f2fa274d2205dc23648449ceb23f61
-
SHA256
8ef42748d57d163c6c8f519cd663b6c8ef28d2f1afa527716cd2d40f4c4f5601
-
SHA512
3b85142303d1607e718b4658eed2ede5a3695af5a193d7a3f7c529df39d45fb9cd873989de171139296ef52ad0aeecc0507681790a858c77aa6cf77cb20cf910
-
SSDEEP
49152:fml2hgZfDc2MsSeqW3u2Y0Cr6s1Bm2SOvxoewADrU1PE9sS:e2sKsDuQCrJLmnOYAvCPQsS
Malware Config
Extracted
alienbot
http://18likveletcalistiranusom.com
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Cerberus payload 1 IoCs
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 7 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock 1 IoCs
Processes
-
gyjjnzuynoytqwsbmheodkojrik.cgrgloxtlzzugaindmabhp.nmjegswkuutjtt1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Acquires the wake lock
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
710KB
MD54cfac28e6de420a67f47c16112a14ba5
SHA1e92a353a9fc6764189fbf35b0eb011b8412aefe3
SHA2569c31d977b4333bfe7727d1f44a2386685ea58dc7dc9e1eba6abd1d14c9404b2d
SHA512c05cc9678e00952b47add83e4bcc5012e4542b9b4f99acfa3410ac1ce5b0216946965e4c00f7d59694165ff50f6c153356c23261a8a966f0bddf2c74d2d8debb
-
Filesize
710KB
MD51a2c6b59c2e35039736f07c45175793e
SHA1106b97e48d61bb952d4b154bd91a38a6a6082ce0
SHA2565e014f51504d2865151ca025a0660004cda6001e41fb82864059e365d69a0168
SHA512aef8118e6ebf3084a4efe155788cc3e7a778b4af5fe9fb0a0edd102233cffdbdb4985d8c9846509d3f587dd3010b9a46fb0bab572370b8dab7c981d6074b392a
-
Filesize
408B
MD55504d3505ad9a2e23ea8910f8eca917b
SHA16490ac1c2851fd56e4fc31033d3f0b5582bbc16d
SHA256659ec12a2263e64de85cb36e1f78e201d2d7ec4727322bb27e8b62ffaeca795d
SHA5126564e965a1f07239715d76d4739f31f08331153c90ea718ad5244b5e57957487e559beeffe0662b3459049be9f22a4913f5aaebfef331aaa5c45546b00d45356