General

  • Target

    bundle.apk

  • Size

    1.8MB

  • Sample

    211203-nv6e4sgchm

  • MD5

    334e39426e5af982516f1cf7f14b8ab9

  • SHA1

    1b617daa3be15a77881e0945399b8cfbc5ccdcc0

  • SHA256

    1f99051054b9c0a682a83939624b386e1d5e29f57454275c8639b174738f839b

  • SHA512

    cfa7ba7e730e3dac56c6dd7594c6ca383f9c87b3a90ca85083c792bebef8b66d51597717f80eaaa4fcc0cd1ecb2d4894575501546fedf1b0b34b32a5ce6b7fa6

Malware Config

Extracted

Family

alienbot

C2

http://fiftiforfrisend.quest

Targets

    • Target

      bundle.apk

    • Size

      1.8MB

    • MD5

      334e39426e5af982516f1cf7f14b8ab9

    • SHA1

      1b617daa3be15a77881e0945399b8cfbc5ccdcc0

    • SHA256

      1f99051054b9c0a682a83939624b386e1d5e29f57454275c8639b174738f839b

    • SHA512

      cfa7ba7e730e3dac56c6dd7594c6ca383f9c87b3a90ca85083c792bebef8b66d51597717f80eaaa4fcc0cd1ecb2d4894575501546fedf1b0b34b32a5ce6b7fa6

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks