General

  • Target

    a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk

  • Size

    1.6MB

  • Sample

    220124-svqf4sfbg8

  • MD5

    e20ee1ac142412523d58128c616881ba

  • SHA1

    bc2e95e5d959012484e9abc1a70c077206d6e344

  • SHA256

    a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7

  • SHA512

    9b26a8af1a0ebe3ab35285d5192493c7e04705634536e4dfc23ac683446b7fa4cfbdc09b99d592fd0008017d2155ec9e486ba8557c36cd5c0d55fb23f6b67d41

Malware Config

Extracted

Family

alienbot

C2

http://irdelendiniz.co.vu

Targets

    • Target

      a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7.apk

    • Size

      1.6MB

    • MD5

      e20ee1ac142412523d58128c616881ba

    • SHA1

      bc2e95e5d959012484e9abc1a70c077206d6e344

    • SHA256

      a978ac08920747f93fcf2dd9a079ea068ac00bbd47609c3b1afd0bfcb87180f7

    • SHA512

      9b26a8af1a0ebe3ab35285d5192493c7e04705634536e4dfc23ac683446b7fa4cfbdc09b99d592fd0008017d2155ec9e486ba8557c36cd5c0d55fb23f6b67d41

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks