General

  • Target

    Chrome571424.apk

  • Size

    3.6MB

  • Sample

    210810-q1ylb3jfqj

  • MD5

    493b35f8fae4f4d06e36e98082560f4f

  • SHA1

    eff6ed1e028eef7e7d987b6e14c44ac3a828629a

  • SHA256

    ac2cb2c60ede6b43143cf2b98d56932d3f5c97aee0c5f4319e5539203cece079

  • SHA512

    f41399a73a4169218564de4bae3f54cb6886d90f4b6d35200ee48ac3a3f11ace2c5f73fc08047c42f727618ac536f7354cf6ae1605e21537f486712b3691a04d

Malware Config

Extracted

Family

alienbot

C2

http://rndhsadjersxexdd.xyz

Targets

    • Target

      Chrome571424.apk

    • Size

      3.6MB

    • MD5

      493b35f8fae4f4d06e36e98082560f4f

    • SHA1

      eff6ed1e028eef7e7d987b6e14c44ac3a828629a

    • SHA256

      ac2cb2c60ede6b43143cf2b98d56932d3f5c97aee0c5f4319e5539203cece079

    • SHA512

      f41399a73a4169218564de4bae3f54cb6886d90f4b6d35200ee48ac3a3f11ace2c5f73fc08047c42f727618ac536f7354cf6ae1605e21537f486712b3691a04d

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks