General

  • Target

    YERLI_PORNO_IFSA_VIDEOLARI.apk

  • Size

    2.7MB

  • Sample

    210810-88f2k3ln5e

  • MD5

    2c0f13b0cdce60ec006f155362da5443

  • SHA1

    95a6959a752d9d0d2f11c902512f19aee7fb6787

  • SHA256

    4d33c3c010f2110912208a54b5ca1f12df2aaed5615cf512dda4ba82c649eabb

  • SHA512

    2538a5a74fe919e54478a1c06bf6315de829eba088c5e664ce112ed7ceff60df8e4a7b6c101cf044a90ca8f3efda605085e8f72d8b76db322fa287ec613ff854

Malware Config

Extracted

Family

alienbot

C2

http://buralarnelerhkaldadad.club

Targets

    • Target

      YERLI_PORNO_IFSA_VIDEOLARI.apk

    • Size

      2.7MB

    • MD5

      2c0f13b0cdce60ec006f155362da5443

    • SHA1

      95a6959a752d9d0d2f11c902512f19aee7fb6787

    • SHA256

      4d33c3c010f2110912208a54b5ca1f12df2aaed5615cf512dda4ba82c649eabb

    • SHA512

      2538a5a74fe919e54478a1c06bf6315de829eba088c5e664ce112ed7ceff60df8e4a7b6c101cf044a90ca8f3efda605085e8f72d8b76db322fa287ec613ff854

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks