General

  • Target

    Chrome709341.apk

  • Size

    3.8MB

  • Sample

    210810-brbmh8dxe2

  • MD5

    7c5e83a49bbe44113c444524cbe7124b

  • SHA1

    3c03d0bfc54f5fccf029f14f9a996c70d4f16014

  • SHA256

    c10a976dabb58f3ea812ed548287842a65903214ac1a92bf2d499f87787a50f8

  • SHA512

    dee77a1910bb6e552aef192e1cca5fa02277db5fb79de8522735429baa8b3ec7b0dbcb03eaab707c441e01f52828d7828a7089dd37b05023ceaf80b57c7e877c

Malware Config

Extracted

Family

alienbot

C2

http://rndhsadjersxexdd.xyz

Targets

    • Target

      Chrome709341.apk

    • Size

      3.8MB

    • MD5

      7c5e83a49bbe44113c444524cbe7124b

    • SHA1

      3c03d0bfc54f5fccf029f14f9a996c70d4f16014

    • SHA256

      c10a976dabb58f3ea812ed548287842a65903214ac1a92bf2d499f87787a50f8

    • SHA512

      dee77a1910bb6e552aef192e1cca5fa02277db5fb79de8522735429baa8b3ec7b0dbcb03eaab707c441e01f52828d7828a7089dd37b05023ceaf80b57c7e877c

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks