General
-
Target
4616571958624256.zip
-
Size
300KB
-
Sample
210406-flfnnjxswj
-
MD5
21d06c74b3da7e0f6fcf039c41c3ad2b
-
SHA1
4a5008cea5e0648f59c43ab2f1b66102051ea7da
-
SHA256
aabf6850d43466078485f3aadeaa14de9b9c925004a0f89f637d8469d6e267ce
-
SHA512
83dd850c8ec8cf1c69ac0e190c852f3e3608ca9f6236574ea6c0cbda6cd8a218596013d0efef717e48db4e77ce86dbb0f21045002b5f8be2bea4607fbc352899
Malware Config
Extracted
alienbot
http://devletpasakuzgunlese.digital
Targets
-
-
Target
3376050dc0a84ff700f5e9bb5f20b3cb4361b74bbc362a2a1d39e141db68ba06
-
Size
335KB
-
MD5
b05a68cf54b407bbf081e6f58d57d7c0
-
SHA1
4921dee32d7301b10df02ae751fd8be24d88b943
-
SHA256
3376050dc0a84ff700f5e9bb5f20b3cb4361b74bbc362a2a1d39e141db68ba06
-
SHA512
a1055deb3de653c3560d782186439290b79437f794da2e7c04c2ed1240a35c06bc80d8593a4f3029d12bbb44485d703518969da064c47f956038ea634378c82d
Score10/10-
Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
-
Removes its main activity from the application launcher
-