General

  • Target

    f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0

  • Size

    2.7MB

  • Sample

    220208-afvheabaf2

  • MD5

    aa2abc87e71ec70eee4fc7550124754d

  • SHA1

    3ce31150929c6e0dbddf32607c58589bbd68095d

  • SHA256

    f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0

  • SHA512

    dfc0e12141a233ea9149cae3c5907d861a14d30812cedda171ede5fbc410fa0df638463cca8ef5d7aae92852f2be191828f39a22edf8b96e7d0a9b8d8d8b05ef

Malware Config

Extracted

Family

alienbot

C2

http://alunss.ml

Targets

    • Target

      f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0

    • Size

      2.7MB

    • MD5

      aa2abc87e71ec70eee4fc7550124754d

    • SHA1

      3ce31150929c6e0dbddf32607c58589bbd68095d

    • SHA256

      f8d950f43835eab4b300a075f8c04ed8232d4f035bf6dce99445054ed97e89b0

    • SHA512

      dfc0e12141a233ea9149cae3c5907d861a14d30812cedda171ede5fbc410fa0df638463cca8ef5d7aae92852f2be191828f39a22edf8b96e7d0a9b8d8d8b05ef

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks