General

  • Target

    11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk

  • Size

    1.7MB

  • Sample

    220121-n65myshcbn

  • MD5

    bacc0736a6feb5ea0968f5c60cc7835e

  • SHA1

    c2bbd80c74b82ac75797026498e01b83dad01a2c

  • SHA256

    11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0

  • SHA512

    6af546b653e7164c7b76f8f79e8c6fa2cd741758c84023b602eb00e0911de64dfa59494b23f86096b9bc35cc9241d304f31a78b03d09ed4823ebe11bd0ce3b15

Malware Config

Extracted

Family

alienbot

C2

http://yoklesfomerdesgomres.net

Targets

    • Target

      11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0.apk

    • Size

      1.7MB

    • MD5

      bacc0736a6feb5ea0968f5c60cc7835e

    • SHA1

      c2bbd80c74b82ac75797026498e01b83dad01a2c

    • SHA256

      11072e33ba896d7ddd04ed9c28fb35665f9c5dbac804ba596f7018d79eccd7e0

    • SHA512

      6af546b653e7164c7b76f8f79e8c6fa2cd741758c84023b602eb00e0911de64dfa59494b23f86096b9bc35cc9241d304f31a78b03d09ed4823ebe11bd0ce3b15

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks