General

  • Target

    Bildirim_obf.apk

  • Size

    3.1MB

  • Sample

    210827-s3jyyjag2s

  • MD5

    906fa025f84da7144000a26f2609deec

  • SHA1

    6e9a59a56e65672ec6f1f002aec438f8e29f86a7

  • SHA256

    1a5bf2c57b4851d2e2186298a7cbd438e5cae349836700a5dc6102615ed0c36a

  • SHA512

    b46be3f8348f7b8f278bc12a5c50b3df929f82ce8b1e5d6ad8aa12c2aae5c7dcf7f65d1a1cf65d8794f0abe8dbd24d55da30de8d0fda1f5bef38b025a854aba6

Malware Config

Extracted

Family

alienbot

C2

http://34.107.122.112

Targets

    • Target

      Bildirim_obf.apk

    • Size

      3.1MB

    • MD5

      906fa025f84da7144000a26f2609deec

    • SHA1

      6e9a59a56e65672ec6f1f002aec438f8e29f86a7

    • SHA256

      1a5bf2c57b4851d2e2186298a7cbd438e5cae349836700a5dc6102615ed0c36a

    • SHA512

      b46be3f8348f7b8f278bc12a5c50b3df929f82ce8b1e5d6ad8aa12c2aae5c7dcf7f65d1a1cf65d8794f0abe8dbd24d55da30de8d0fda1f5bef38b025a854aba6

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

MITRE ATT&CK Matrix

Tasks