Resubmissions

12-07-2022 04:08

220712-eqexxschg7 10

General

  • Target

    4d1174234d40792da0ae5656f309865d634f288783ec430ee5308d55101b5369

  • Size

    3.7MB

  • Sample

    220712-eqexxschg7

  • MD5

    98a55dc8317b3615ebc222a19d7aa77c

  • SHA1

    10cf620246a4ceec29e3b3b253e40d0a26ddf18d

  • SHA256

    4d1174234d40792da0ae5656f309865d634f288783ec430ee5308d55101b5369

  • SHA512

    130694cc309efc5579aad5d0459595024b86332ececbfb587a0ee0409814c2f6356b996045741dc3dc233c280d572879347dae8c78aa2129fe834c8e3e2a7aae

Malware Config

Extracted

Family

alienbot

C2

http://esipx.xyz

Targets

    • Target

      4d1174234d40792da0ae5656f309865d634f288783ec430ee5308d55101b5369

    • Size

      3.7MB

    • MD5

      98a55dc8317b3615ebc222a19d7aa77c

    • SHA1

      10cf620246a4ceec29e3b3b253e40d0a26ddf18d

    • SHA256

      4d1174234d40792da0ae5656f309865d634f288783ec430ee5308d55101b5369

    • SHA512

      130694cc309efc5579aad5d0459595024b86332ececbfb587a0ee0409814c2f6356b996045741dc3dc233c280d572879347dae8c78aa2129fe834c8e3e2a7aae

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks