General

  • Target

    Chrome216916.apk

  • Size

    4.2MB

  • Sample

    210811-q7ntjczg2a

  • MD5

    f505a92ec494fcb1bfeddd0a76b922af

  • SHA1

    7d96dd3fb13ad5e54c32b8af9e689547befad53a

  • SHA256

    f96fe97104d33743f476e7b3c5bbd1f5cced9bfa4837bab347c46e4eaf3309ea

  • SHA512

    d78c9a5a892920786edb478522fca913f9f0da88e1c342ce378e580f693cf0bbac42d3e479a9ca5887c32dd2ae0d858cf67450f79d43ab22395ffc5b9ec9165f

Malware Config

Extracted

Family

alienbot

C2

http://dndterdsveqesdasf.xyz

Targets

    • Target

      Chrome216916.apk

    • Size

      4.2MB

    • MD5

      f505a92ec494fcb1bfeddd0a76b922af

    • SHA1

      7d96dd3fb13ad5e54c32b8af9e689547befad53a

    • SHA256

      f96fe97104d33743f476e7b3c5bbd1f5cced9bfa4837bab347c46e4eaf3309ea

    • SHA512

      d78c9a5a892920786edb478522fca913f9f0da88e1c342ce378e580f693cf0bbac42d3e479a9ca5887c32dd2ae0d858cf67450f79d43ab22395ffc5b9ec9165f

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks