alienbot | 165aac61794ce24b3d51da7a23c976e7c54a37b5c8840dabd39bf6c2d7e213db | Triage™

Analysis

max time kernel
1956174s
max time network
33s
platform
android_x64
resource
android-x64
submitted
12/10/2021, 13:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Chrome830615.apk
Size 3.6MB
Sample211012-p9scgaccfr
SHA256 165aac61794ce24b3d51da7a23c976e7c54a37b5c8840dabd39bf6c2d7e213db
MD5 9e9b4280d0e4b94e83becc8815b86d6b
SHA1 65aabe741b47a842f0b49c698549de18d3be40a7
SHA512 1e7c71e29aa9dcfd77779a442bd5bc9dacf3cf469d0a8d0b2b7417225a3035e0bc85d131e55d51a5e314381a2b7371e887ec5deaba75ea2e7ac03babaa5386db
MD5 SHA1 SHA512

Score

10^/10

alienbot banker infostealer trojan

Malware Config

Extracted

Family

alienbot

C2

http://asbyow8su7h3i0mdydz1.xyz

Signatures

Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
banker trojan infostealer alienbot

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/supporter.safely.daily/app_DynamicOptDex/rlCkf.json	3687	supporter.safely.daily

supporter.safely.daily
1⤵
- Loads dropped Dex/Jar
PID:3687

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads