General

  • Target
    bb0e3b67002be706c7902bb8980f93ca2e7ba12bd4a15a462a7102ed1885743c.apk
  • Size 900KB
  • Sample211008-nv3n8aebbn
  • SHA256 bb0e3b67002be706c7902bb8980f93ca2e7ba12bd4a15a462a7102ed1885743c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • alienbot

C2
  • http://paygercoleroneztek.net

Targets

    • Target
      bb0e3b67002be706c7902bb8980f93ca2e7ba12bd4a15a462a7102ed1885743c.apk
    • Size 900KB
    • SHA256 bb0e3b67002be706c7902bb8980f93ca2e7ba12bd4a15a462a7102ed1885743c
    • MD5 SHA1 SHA512
    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Reads name of network operator

      Uses Android APIs to discover system information.

MITRE ATT&CK Matrix

Tasks