General

  • Target

    98338c83e7e89c0f913de151ffa6219504116561328a1bbede46f78d910137b4

  • Size

    1.3MB

  • Sample

    220201-fl9r6shfc5

  • MD5

    0b36daf30cb8c83da3916ef1123f0011

  • SHA1

    07bc566eb38294c3e3f1589cd9fb645ee63823f1

  • SHA256

    98338c83e7e89c0f913de151ffa6219504116561328a1bbede46f78d910137b4

  • SHA512

    144d76ef903f8e6fef154832f0a81c5b271c29c55bed12a8f7007b96cbf94091168c58e37ebf62adc8fa52bcf374e81ae3aae68e32921e3bdaf70560ecf86a05

Malware Config

Extracted

Family

alienbot

C2

http://zeusland.uno

Targets

    • Target

      98338c83e7e89c0f913de151ffa6219504116561328a1bbede46f78d910137b4

    • Size

      1.3MB

    • MD5

      0b36daf30cb8c83da3916ef1123f0011

    • SHA1

      07bc566eb38294c3e3f1589cd9fb645ee63823f1

    • SHA256

      98338c83e7e89c0f913de151ffa6219504116561328a1bbede46f78d910137b4

    • SHA512

      144d76ef903f8e6fef154832f0a81c5b271c29c55bed12a8f7007b96cbf94091168c58e37ebf62adc8fa52bcf374e81ae3aae68e32921e3bdaf70560ecf86a05

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks