Fibabanka_Destek_obf.apk

General
Target

Fibabanka_Destek_obf.apk

Size

2MB

Sample

201208-aerdwxnxra

Score
10 /10
MD5

6073f077566eae176783153d604c018f

SHA1

fc94034f137032576e4cec1b79fa34c0f2cc3ab5

SHA256

103073604235e9e047abead5f497b5079e3a813f1aa036f5c6cb987c01ec421b

SHA512

3ac90c4ebb356a42f475b6f4f431050fbc4f3f1a199fa54a2b1aa4845a3f433c6e012220b2c6cf6e8d4cb574ebacd8e8d3d93d3a801be224e1df0c210121c91e

Malware Config

Extracted

Family alienbot
C2

http://turkasker12.net

Targets
Target

Fibabanka_Destek_obf.apk

MD5

6073f077566eae176783153d604c018f

Filesize

2MB

Score
10 /10
SHA1

fc94034f137032576e4cec1b79fa34c0f2cc3ab5

SHA256

103073604235e9e047abead5f497b5079e3a813f1aa036f5c6cb987c01ec421b

SHA512

3ac90c4ebb356a42f475b6f4f431050fbc4f3f1a199fa54a2b1aa4845a3f433c6e012220b2c6cf6e8d4cb574ebacd8e8d3d93d3a801be224e1df0c210121c91e

Tags

Signatures

  • Alienbot

    Description

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    Tags

  • Removes its main activity from the application launcher

  • Loads dropped Dex/Jar

    Description

    Runs executable file dropped to the device during analysis.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks