alienbot | ffaca4fd7492966be01c598c48d3d3c66ac0826891975bd4d9e1df3fe5080996 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ffaca4fd7492966be01c598c48d3d3c66ac0826891975bd4d9e1df3fe5080996.apk
Size 414KB
Sample211014-l4j75aggdk
SHA256 ffaca4fd7492966be01c598c48d3d3c66ac0826891975bd4d9e1df3fe5080996
MD5 d9c721dfec7c0f173af4fdb882a45cb1
SHA1 9f79cee296b8fca29105162599de4d8424f1d7c3
SHA512 7f3384a5c3a6ac91d5563ecbb4c6bb03d5ecfa25d7b52a1caaf50bcadb4967ba5783c7d2a94105758d7336586d767ea2f8eddb0ad299dd10d1b796b5e9dcb2e2
MD5 SHA1 SHA512

Score

10^/10

alienbot android banker infostealer obfuscation trojan

Malware Config

Extracted

Family

alienbot

C2

http://resemesdomesnes.net

Targets

- Target
  ffaca4fd7492966be01c598c48d3d3c66ac0826891975bd4d9e1df3fe5080996.apk
- Size 414KB
- SHA256 ffaca4fd7492966be01c598c48d3d3c66ac0826891975bd4d9e1df3fe5080996
- MD5 d9c721dfec7c0f173af4fdb882a45cb1
- SHA1 9f79cee296b8fca29105162599de4d8424f1d7c3
- SHA512 7f3384a5c3a6ac91d5563ecbb4c6bb03d5ecfa25d7b52a1caaf50bcadb4967ba5783c7d2a94105758d7336586d767ea2f8eddb0ad299dd10d1b796b5e9dcb2e2
- MD5 SHA1 SHA512
Score

10^/10

alienbot banker infostealer obfuscation trojan
- Alienbot
  Alienbot is a fork of Cerberus banker first seen in January 2020.
  banker trojan infostealer alienbot
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

alienbotbankerinfostealerobfuscationtrojan