General

  • Target

    04.apk

  • Size

    1.8MB

  • Sample

    211215-tj34haahap

  • MD5

    049f2ad5c6be4de18e03eacd94117746

  • SHA1

    970cbcc272c9f03574444e376fa006b8df659e5f

  • SHA256

    d0c32e4c17de29509486482e515956033a27982c41c54392f9e0ce826840daec

  • SHA512

    07bf87284442e864f898db26e953259c0ccbcc74d50d78a91cb98c95382281f2bbf8e1b067105d1e7d715480a4db9f3cafce091d4f4b3fc88a35b553929e7522

Malware Config

Extracted

Family

alienbot

C2

http://fiftiforfrisend.quest

Targets

    • Target

      04.apk

    • Size

      1.8MB

    • MD5

      049f2ad5c6be4de18e03eacd94117746

    • SHA1

      970cbcc272c9f03574444e376fa006b8df659e5f

    • SHA256

      d0c32e4c17de29509486482e515956033a27982c41c54392f9e0ce826840daec

    • SHA512

      07bf87284442e864f898db26e953259c0ccbcc74d50d78a91cb98c95382281f2bbf8e1b067105d1e7d715480a4db9f3cafce091d4f4b3fc88a35b553929e7522

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks