General

  • Target

    e1f09d930bf5b9f4de58149a6a3eb928912d9d8578b623ce31d56673d5c3d834.apk

  • Size

    3.5MB

  • Sample

    210524-gjybg3nr4x

  • MD5

    e20afdb4d33b80a8a2e61d7a541859a6

  • SHA1

    d6e31d17dc00a4fe3dc81baf8f314d710f7254da

  • SHA256

    e1f09d930bf5b9f4de58149a6a3eb928912d9d8578b623ce31d56673d5c3d834

  • SHA512

    2bc627847a066917d229091da91131dc9cd862e063d807affca96397624d5d0caea378e839c60c9903f0532f8ec85ba5e4fe18ac3acdbc90749d2f9b2bb3c1b2

Malware Config

Extracted

Family

alienbot

C2

http://berkjesa.xyz

Targets

    • Target

      e1f09d930bf5b9f4de58149a6a3eb928912d9d8578b623ce31d56673d5c3d834.apk

    • Size

      3.5MB

    • MD5

      e20afdb4d33b80a8a2e61d7a541859a6

    • SHA1

      d6e31d17dc00a4fe3dc81baf8f314d710f7254da

    • SHA256

      e1f09d930bf5b9f4de58149a6a3eb928912d9d8578b623ce31d56673d5c3d834

    • SHA512

      2bc627847a066917d229091da91131dc9cd862e063d807affca96397624d5d0caea378e839c60c9903f0532f8ec85ba5e4fe18ac3acdbc90749d2f9b2bb3c1b2

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks