General

  • Target

    build.apk

  • Size

    301KB

  • Sample

    220121-t5dqqsacc3

  • MD5

    ee5c67d9b6064d6f36e9025b5c142190

  • SHA1

    b4f03e335e0f96100ac3362c9b0dee82437d31ab

  • SHA256

    853f583921fc1750df0ce73c929be81dc7f401f11870e3a7c0e339b76a694742

  • SHA512

    9f5aaebe775f8c2c75947dcf30ff16ee19b5120a331f37b3051847c7f08d9921ba26582c7cdb4bad996ba5457f45545b964b1bad902e445faa6ba921fc1b1463

Malware Config

Extracted

Family

alienbot

C2

http://birgaripdunyasanki.tk

Targets

    • Target

      build.apk

    • Size

      301KB

    • MD5

      ee5c67d9b6064d6f36e9025b5c142190

    • SHA1

      b4f03e335e0f96100ac3362c9b0dee82437d31ab

    • SHA256

      853f583921fc1750df0ce73c929be81dc7f401f11870e3a7c0e339b76a694742

    • SHA512

      9f5aaebe775f8c2c75947dcf30ff16ee19b5120a331f37b3051847c7f08d9921ba26582c7cdb4bad996ba5457f45545b964b1bad902e445faa6ba921fc1b1463

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks