General

  • Target
    Turk_ifsa_Gizli_Cekim_obf.apk
  • Size 3.0MB
  • Sample210811-vbqmerls12
  • SHA256 da43b86847f10c4578be3c80104729f243c6724d9f151bf8cfe087d09a9f74b9
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • alienbot

C2
  • http://buralarnelernerelerhem.club

Targets

    • Target
      Turk_ifsa_Gizli_Cekim_obf.apk
    • Size 3.0MB
    • SHA256 da43b86847f10c4578be3c80104729f243c6724d9f151bf8cfe087d09a9f74b9
    • MD5 SHA1 SHA512
    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks