General

  • Target

    bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839

  • Size

    1.7MB

  • Sample

    220201-esjnwshah4

  • MD5

    ae8158afe08a63dfa62ef1625b8c3002

  • SHA1

    33175fb15c19ad7d29c4c0a500ed570376d690f6

  • SHA256

    bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839

  • SHA512

    987753531f76d823aae67880383d0d08aaae2730dc8979e8952812cd0278c38d28f72109151f2692024aeda75b7ee6b0a54fee4ca4c55ba0cbb71255ba700baa

Malware Config

Extracted

Family

alienbot

C2

http://botduke1.ug

Targets

    • Target

      bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839

    • Size

      1.7MB

    • MD5

      ae8158afe08a63dfa62ef1625b8c3002

    • SHA1

      33175fb15c19ad7d29c4c0a500ed570376d690f6

    • SHA256

      bca52647ce9f4900b754fcc0d8ef6329fb0229401e833534905969d10a82d839

    • SHA512

      987753531f76d823aae67880383d0d08aaae2730dc8979e8952812cd0278c38d28f72109151f2692024aeda75b7ee6b0a54fee4ca4c55ba0cbb71255ba700baa

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks