alienbot | f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0 | Triage™

Analysis

max time kernel
3611493s
max time network
190s
platform
android_x64
resource
android-x64
submitted
08/02/2022, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0.apk
Size 2.7MB
Sample220208-afvheabaf2
SHA256 f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0
MD5 aa2abc87e71ec70eee4fc7550124754d
SHA1 3ce31150929c6e0dbddf32607c58589bbd68095d
SHA512 dfc0e12141a233ea9149cae3c5907d861a14d30812cedda171ede5fbc410fa0df638463cca8ef5d7aae92852f2be191828f39a22edf8b96e7d0a9b8d8d8b05ef
MD5 SHA1 SHA512

Score

10^/10

alienbot banker infostealer trojan

Malware Config

Extracted

Family

alienbot

C2

http://alunss.ml

Signatures

Alienbot
Alienbot is a fork of Cerberus banker first seen in January 2020.
banker trojan infostealer alienbot

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/alcohol.patch.crumble/app_DynamicOptDex/rBXPpKk.json	3801	alcohol.patch.crumble
/data/user/0/alcohol.patch.crumble/app_DynamicOptDex/rBXPpKk.json	3801	alcohol.patch.crumble

alcohol.patch.crumble
1⤵
- Loads dropped Dex/Jar
PID:3801

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads