alienbot | dad6cdcd782dc3daf5cf1dbdd82c58336af18b33a87be3f19b0833e547fe90a5 | Triage™

Analysis

max time kernel
2213198s
max time network
115s
platform
android_x64
resource
android-x64
submitted
15/10/2021, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Chrome637178.apk
Size 4.3MB
Sample211015-plm3vabfbq
SHA256 dad6cdcd782dc3daf5cf1dbdd82c58336af18b33a87be3f19b0833e547fe90a5
MD5 ea911124defd4bf8d63aba29b0a04ed9
SHA1 de6bdb3f1153e95fbf3b4aff904616ff8340e681
SHA512 1458992047473bdb3aed2e1db675495a2924e70d8ff087e487d140ffaa46c0bec78c0d30f96a24eba4aa09bfce81230e531af817e2ff5332bfe8b60e365a7cd0
MD5 SHA1 SHA512

Score

10^/10

alienbot banker infostealer trojan

Malware Config

Extracted

Family

alienbot

C2

http://2tn54bh60mp4mlpqo4k2.xyz

Signatures

Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
banker trojan infostealer alienbot

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/consult.steam.science/app_DynamicOptDex/ztHLIhRJZdnHVSVV.json	3695	consult.steam.science

consult.steam.science
1⤵
- Loads dropped Dex/Jar
PID:3695

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads