General

  • Target
    bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671.apk
  • Size 416KB
  • Sample211007-nls4escecq
  • SHA256 bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • alienbot

C2
  • http://ahmedosgayredosney.net

Targets

    • Target
      bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671.apk
    • Size 416KB
    • SHA256 bc2a0364ac5577666c7044aa3db6a4841a7c01c5be24d766e80fadc24221f671
    • MD5 SHA1 SHA512
    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

MITRE ATT&CK Matrix

Tasks