General

  • Target

    bundle.apk

  • Size

    1.8MB

  • Sample

    211206-r4qb2ahca4

  • MD5

    49c385d4cb2dab03aaa55f03090d36cd

  • SHA1

    4cf09ba61dacbd7185a400d37137518928a22cb0

  • SHA256

    dcb44dcc682dfe8ac8582125fb201c583809c12f578e70eafd6c37de3cf06f86

  • SHA512

    4375e4a48bf4bd93a50cb8debeabe35ce30e0d0909dac0b6a0411569e79a3584570da817c73179443bda176a440d95308f826d6ad948f59026a735bca329c1d3

Malware Config

Extracted

Family

alienbot

C2

http://fiftiforfrisend.quest

Targets

    • Target

      bundle.apk

    • Size

      1.8MB

    • MD5

      49c385d4cb2dab03aaa55f03090d36cd

    • SHA1

      4cf09ba61dacbd7185a400d37137518928a22cb0

    • SHA256

      dcb44dcc682dfe8ac8582125fb201c583809c12f578e70eafd6c37de3cf06f86

    • SHA512

      4375e4a48bf4bd93a50cb8debeabe35ce30e0d0909dac0b6a0411569e79a3584570da817c73179443bda176a440d95308f826d6ad948f59026a735bca329c1d3

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks