General

  • Target

    AndroidGuncelleme.apk

  • Size

    3.2MB

  • Sample

    210821-larwwdstd2

  • MD5

    be0a0e5e44bfd1f88aacc9759eecb33f

  • SHA1

    115a112ab7ba770606b5a6dd64285351e578f189

  • SHA256

    06cd6615089297c72da04561ffd8c65676304aba74d684ab0559159effbabf4f

  • SHA512

    f282934eeb74b318d484d75c30e43c71d1296d914370c311f390fb9e095055a7de9f5eacc0955e542cb797595e87125a812d15e076731b975dbc307d6833f7ea

Malware Config

Extracted

Family

alienbot

C2

http://34.89.151.222

Targets

    • Target

      AndroidGuncelleme.apk

    • Size

      3.2MB

    • MD5

      be0a0e5e44bfd1f88aacc9759eecb33f

    • SHA1

      115a112ab7ba770606b5a6dd64285351e578f189

    • SHA256

      06cd6615089297c72da04561ffd8c65676304aba74d684ab0559159effbabf4f

    • SHA512

      f282934eeb74b318d484d75c30e43c71d1296d914370c311f390fb9e095055a7de9f5eacc0955e542cb797595e87125a812d15e076731b975dbc307d6833f7ea

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

MITRE ATT&CK Matrix

Tasks