Analysis
-
max time kernel
154s -
max time network
133s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
15-03-2024 04:23
General
-
Target
ca7aec7eacd0f2820c73bf0a9523a382.apk
-
Size
2.9MB
-
MD5
ca7aec7eacd0f2820c73bf0a9523a382
-
SHA1
c9eb3866d202582495c07abe5d8fcdf47e6c98d0
-
SHA256
fb38636d1afb7c6df603ac4f441de7fd3d01c79c97577a5aca0afef8b2b8041b
-
SHA512
0fc462d58394a029eeb015c23f0c7b2d39a924a7c0efd8ef02451bb99c8503f330917b3ee1634d309a07a404eadb02420a2e4c63ffa118fd83c5a0e7a02e85ab
-
SSDEEP
49152:rHJ/x3X4bGFT1ypsI9l8cxyvWdGHgNvewS2u6P6dlHq00b0J9d27jNP9aayTGgC:PI9sI4cwYHAh2P1QJ9yjZ9viGgC
Malware Config
Extracted
alienbot
http://rareqtereqqer.sbs
Signatures
-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Cerberus
An Android banker that is being rented to actors beginning in 2019.
-
Cerberus payload 1 IoCs
-
Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 TTPs 3 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
rival.draft.pupil1⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
694KB
MD5372fe4205030dca83c8453cbc6633105
SHA118a41d36fd758d7bd2801ee23e64930d10303386
SHA25629cec6cce0a502bc5a845616360f78af53bc0304b73a69f0fe848f1a685a4114
SHA5125abd2caeaa1d77f38f3de0156d4e518082e5f4547e2349e63643e89252c60ac8904987836b73af4be41b5b18d5858da828a772c37fa404db610d190a5e244730
-
Filesize
694KB
MD5a1b9e4ea8a4cf58351b9f2871e4b1b74
SHA1a4b02aced8993dbbafc61082fa64c58c21bc75df
SHA256d1201aa63a020b6a9fdecb1c220653ebf6c7440d64bc113ec88c9885a3d6f979
SHA5120286706372cc120cd2ba5e7509e439192f4e1699ab412c91c6b5677dd170c08253d88f6548fb23c2ffcc4ca924f405cf21c6d898eda93d87a6935557e26a761e
-
Filesize
455B
MD54b33d34ae41ff512cdf2b4f041fc0346
SHA16d16e2cd21f4d0557b9d0df35ed8704216f80954
SHA25609a34fc05d02d4b3d1c0b75b5fc92df61106244bc0dce18066be33271aadadcc
SHA512c2594abbd486666e63ad82f6059158abf58352c535b70b1993076ac305b7fb0225db1f16a3a91ae820a14d7fb980f1b76c6196dff500f6bf624f2cf0fe320874