alienbot | 3830acc79c670cf20e30034226d1916a57d2dffd15215ce067cae116badbcdfc | Triage™

Analysis

max time kernel
2421798s
max time network
219s
platform
android_x64
resource
android-x64
submitted
25/01/2022, 08:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3830acc79c670cf20e30034226d1916a57d2dffd15215ce067cae116badbcdfc.apk
Size 2.2MB
Sample220125-kaha1acba3
SHA256 3830acc79c670cf20e30034226d1916a57d2dffd15215ce067cae116badbcdfc
MD5 619e6314d0bde9c2c516bb92c442c76f
SHA1 9a0ab0b8b33d4a8874741cf84e7c67737c3206db
SHA512 e21d974bee2aba7222e9c1c0d385051a73e2f8c1d65cebb32a15ac7fc60c8f5df2c397017b2366683ecf68a004a500704aacb039ab79cf4e436cca1be1041e36
MD5 SHA1 SHA512

Score

10^/10

alienbot banker infostealer trojan

Malware Config

Extracted

Family

alienbot

C2

http://selamolsunselam.tk

Signatures

Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
banker trojan infostealer alienbot

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.verify.flip/app_DynamicOptDex/pmumdhR.json	3858	com.verify.flip

com.verify.flip
1⤵
- Loads dropped Dex/Jar
PID:3858
- com.verify.flip
  2⤵
  PID:3930

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads