General

  • Target

    Android-Guncelleme.apk

  • Size

    2.9MB

  • Sample

    210810-y9sarvgtya

  • MD5

    ca7aec7eacd0f2820c73bf0a9523a382

  • SHA1

    c9eb3866d202582495c07abe5d8fcdf47e6c98d0

  • SHA256

    fb38636d1afb7c6df603ac4f441de7fd3d01c79c97577a5aca0afef8b2b8041b

  • SHA512

    0fc462d58394a029eeb015c23f0c7b2d39a924a7c0efd8ef02451bb99c8503f330917b3ee1634d309a07a404eadb02420a2e4c63ffa118fd83c5a0e7a02e85ab

Malware Config

Extracted

Family

alienbot

C2

http://rareqtereqqer.sbs

Targets

    • Target

      Android-Guncelleme.apk

    • Size

      2.9MB

    • MD5

      ca7aec7eacd0f2820c73bf0a9523a382

    • SHA1

      c9eb3866d202582495c07abe5d8fcdf47e6c98d0

    • SHA256

      fb38636d1afb7c6df603ac4f441de7fd3d01c79c97577a5aca0afef8b2b8041b

    • SHA512

      0fc462d58394a029eeb015c23f0c7b2d39a924a7c0efd8ef02451bb99c8503f330917b3ee1634d309a07a404eadb02420a2e4c63ffa118fd83c5a0e7a02e85ab

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

MITRE ATT&CK Matrix

Tasks