alienbot | 9b6aea664a78f041fe2a6551d9c3f747e0b109ae2dbe49624d87aab2e66b3cf6 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
9b6aea664a78f041fe2a6551d9c3f747e0b109ae2dbe49624d87aab2e66b3cf6.apk
Size 906KB
Sample211007-nlm76scecp
SHA256 9b6aea664a78f041fe2a6551d9c3f747e0b109ae2dbe49624d87aab2e66b3cf6
MD5 bf03ad801863952e76c3e19716f0f061
SHA1 cd0c2970046088695b98cf5bca2411b248998d9b
SHA512 3f4fb00c7ab524690a563c25d7635729adabd84a4dd9980b4cbaa8284738f103b296d62c9e4b9e42a833efec0178c0b385f94d6e8aec12471de98c937de7b368
MD5 SHA1 SHA512

Score

10^/10

alienbot android banker infostealer obfuscation trojan

Malware Config

Extracted

Family

alienbot

C2

http://yolalamazdenced.net

Targets

- Target
  9b6aea664a78f041fe2a6551d9c3f747e0b109ae2dbe49624d87aab2e66b3cf6.apk
- Size 906KB
- SHA256 9b6aea664a78f041fe2a6551d9c3f747e0b109ae2dbe49624d87aab2e66b3cf6
- MD5 bf03ad801863952e76c3e19716f0f061
- SHA1 cd0c2970046088695b98cf5bca2411b248998d9b
- SHA512 3f4fb00c7ab524690a563c25d7635729adabd84a4dd9980b4cbaa8284738f103b296d62c9e4b9e42a833efec0178c0b385f94d6e8aec12471de98c937de7b368
- MD5 SHA1 SHA512
Score

10^/10

alienbot banker infostealer obfuscation trojan
- Alienbot
  Alienbot is a fork of Cerberus banker first seen in January 2020.
  banker trojan infostealer alienbot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

alienbotbankerinfostealerobfuscationtrojan