General

  • Target

    bundle.apk

  • Size

    1.8MB

  • Sample

    211207-ksrbmabda7

  • MD5

    6365e05d01abc00295d40826ffec8388

  • SHA1

    87723c64205336b8d13859ceeb3be672d7a1f51c

  • SHA256

    c2ea0cee960e500ffb9d7bb46d5a2272765dcf9afd55e4e933232c8d33d85295

  • SHA512

    14807dfc9425c36469825c9bb44cd5faf965d903bda756e3fb7f01b7fe75d52fb0120e8ad412a3e6ea8a824d1944904bcc15771f915ab138355794bd65f16d01

Malware Config

Extracted

Family

alienbot

C2

http://fiftiforfrisend.quest

Targets

    • Target

      bundle.apk

    • Size

      1.8MB

    • MD5

      6365e05d01abc00295d40826ffec8388

    • SHA1

      87723c64205336b8d13859ceeb3be672d7a1f51c

    • SHA256

      c2ea0cee960e500ffb9d7bb46d5a2272765dcf9afd55e4e933232c8d33d85295

    • SHA512

      14807dfc9425c36469825c9bb44cd5faf965d903bda756e3fb7f01b7fe75d52fb0120e8ad412a3e6ea8a824d1944904bcc15771f915ab138355794bd65f16d01

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks