General

  • Target

    c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99 (1).apk

  • Size

    3.6MB

  • Sample

    211124-r2gxwachgm

  • MD5

    a9a69efa43b3a4d4b1c0f01986f5538a

  • SHA1

    4112b9f368e53da23757c86cb094f4ba18054fa0

  • SHA256

    c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99

  • SHA512

    1d09cb37a30322c14f373f8b172490cf68b4fec7020e4e1c908aae801123ed7ccdc5d2be65105394e047802912554b08ed1118b95207b34f089763d1fcf09700

Malware Config

Extracted

Family

alienbot

C2

http://opensearchi.kz

Targets

    • Target

      c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99 (1).apk

    • Size

      3.6MB

    • MD5

      a9a69efa43b3a4d4b1c0f01986f5538a

    • SHA1

      4112b9f368e53da23757c86cb094f4ba18054fa0

    • SHA256

      c94b0d524e45a6ea9b4b904587ebe2df73049b1b73e3474b9796f48746adde99

    • SHA512

      1d09cb37a30322c14f373f8b172490cf68b4fec7020e4e1c908aae801123ed7ccdc5d2be65105394e047802912554b08ed1118b95207b34f089763d1fcf09700

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks