General

  • Target

    2462c1cb5990bd2790a70b9fcd3dd5df1ee74d264073fc449d09ff7fb1307d64.apk

  • Size

    415KB

  • Sample

    211014-l4q1nsghb4

  • MD5

    2ac3d49a4c491cdf6e93f2032b3e5a61

  • SHA1

    a7fedc0a98df5b56a39461155919261e99a46dcc

  • SHA256

    2462c1cb5990bd2790a70b9fcd3dd5df1ee74d264073fc449d09ff7fb1307d64

  • SHA512

    3c12104ec697f6495d1575c992b4e703214f1fcca86cf70cebf3635a90ff459801d4abe2958d65be6cea5c7eb143af2b7592840032ec320c5bdd28104186f566

Malware Config

Extracted

Family

alienbot

C2

http://toklomenezfoget.net

Targets

    • Target

      2462c1cb5990bd2790a70b9fcd3dd5df1ee74d264073fc449d09ff7fb1307d64.apk

    • Size

      415KB

    • MD5

      2ac3d49a4c491cdf6e93f2032b3e5a61

    • SHA1

      a7fedc0a98df5b56a39461155919261e99a46dcc

    • SHA256

      2462c1cb5990bd2790a70b9fcd3dd5df1ee74d264073fc449d09ff7fb1307d64

    • SHA512

      3c12104ec697f6495d1575c992b4e703214f1fcca86cf70cebf3635a90ff459801d4abe2958d65be6cea5c7eb143af2b7592840032ec320c5bdd28104186f566

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks