General

  • Target

    Turk_ifsa_Gizli_Cekim_obf.apk

  • Size

    3.0MB

  • Sample

    210811-vbqmerls12

  • MD5

    9b3baa70f573d608d580054af58a8b98

  • SHA1

    d743eb9a025a156a0beae18022dd05b0b91487f6

  • SHA256

    da43b86847f10c4578be3c80104729f243c6724d9f151bf8cfe087d09a9f74b9

  • SHA512

    355c3f9f1b8f87758b2f9a4711544157aeb0b996f7681c6a3ced35b7680006ef8ca82dcc521044e5315a28f2a51ba1d07042fbe6d3d1cd3de2bfe414d089d351

Malware Config

Extracted

Family

alienbot

C2

http://buralarnelernerelerhem.club

Targets

    • Target

      Turk_ifsa_Gizli_Cekim_obf.apk

    • Size

      3.0MB

    • MD5

      9b3baa70f573d608d580054af58a8b98

    • SHA1

      d743eb9a025a156a0beae18022dd05b0b91487f6

    • SHA256

      da43b86847f10c4578be3c80104729f243c6724d9f151bf8cfe087d09a9f74b9

    • SHA512

      355c3f9f1b8f87758b2f9a4711544157aeb0b996f7681c6a3ced35b7680006ef8ca82dcc521044e5315a28f2a51ba1d07042fbe6d3d1cd3de2bfe414d089d351

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks