General

  • Target

    00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk

  • Size

    2.7MB

  • Sample

    211015-k1j8aabdhr

  • MD5

    4027f5e6597f7ac2cbcb3b01706be412

  • SHA1

    90f8adbd9948e14dae9b4b3271593dc69d8e02e9

  • SHA256

    00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42

  • SHA512

    35bc118155e5740d22a0e0930e1c9de1bb53ffc04659352d16daa13263c906e12361acbbd8251e5e33b46d829b8b8903be88452df5955289cc8590291ccbfb38

Malware Config

Extracted

Family

alienbot

C2

http://flpaowulouriaos.ml

Targets

    • Target

      00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk

    • Size

      2.7MB

    • MD5

      4027f5e6597f7ac2cbcb3b01706be412

    • SHA1

      90f8adbd9948e14dae9b4b3271593dc69d8e02e9

    • SHA256

      00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42

    • SHA512

      35bc118155e5740d22a0e0930e1c9de1bb53ffc04659352d16daa13263c906e12361acbbd8251e5e33b46d829b8b8903be88452df5955289cc8590291ccbfb38

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks