General

  • Target

    Chrome630883.apk

  • Size

    3.5MB

  • Sample

    210823-e3hqr2crqj

  • MD5

    479dcd56775e176083561ebbeeb40954

  • SHA1

    462a7c02a47a464d9a39f1c97a7a94072ad40e99

  • SHA256

    dfa0b638bcb149da421ccb28395c625e2b28cdb036e78e0937d10764a083f82b

  • SHA512

    0cc972ee88bd1f751318366c15734c95f044a8691a91e9237bd2e0cc273d3b7d13fecc9f11808b26dab3bdbb240da24ae1f20be3a814540c39471abc34d34fd2

Malware Config

Extracted

Family

alienbot

C2

http://lryuxoqak84d.xyz

Targets

    • Target

      Chrome630883.apk

    • Size

      3.5MB

    • MD5

      479dcd56775e176083561ebbeeb40954

    • SHA1

      462a7c02a47a464d9a39f1c97a7a94072ad40e99

    • SHA256

      dfa0b638bcb149da421ccb28395c625e2b28cdb036e78e0937d10764a083f82b

    • SHA512

      0cc972ee88bd1f751318366c15734c95f044a8691a91e9237bd2e0cc273d3b7d13fecc9f11808b26dab3bdbb240da24ae1f20be3a814540c39471abc34d34fd2

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks