General

  • Target

    vpc0uUb5QX.apk

  • Size

    353KB

  • Sample

    211207-1ggk2sgah3

  • MD5

    7e09dabcefa606614038e0fb7861e60d

  • SHA1

    6d74b998553cb42995a1b8fd2c7909404b643c89

  • SHA256

    92961b73092ec2355b133a3de81ce40245f391b229e5699b263fb596184c7ad4

  • SHA512

    4cca6b93787c73e7cc3e6803677895e6984e8930666bcb0a3ac0e79cc11b50b6224d0da32203253f7f55894dda610600dfbfd071e874e66a6a248a965388dd2d

Malware Config

Extracted

Family

alienbot

C2

http://feryonetsesdomez.net

Targets

    • Target

      vpc0uUb5QX.apk

    • Size

      353KB

    • MD5

      7e09dabcefa606614038e0fb7861e60d

    • SHA1

      6d74b998553cb42995a1b8fd2c7909404b643c89

    • SHA256

      92961b73092ec2355b133a3de81ce40245f391b229e5699b263fb596184c7ad4

    • SHA512

      4cca6b93787c73e7cc3e6803677895e6984e8930666bcb0a3ac0e79cc11b50b6224d0da32203253f7f55894dda610600dfbfd071e874e66a6a248a965388dd2d

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

MITRE ATT&CK Matrix

Tasks