General

  • Target

    0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.jar

  • Size

    3.7MB

  • Sample

    220411-mw82ysghg9

  • MD5

    6cf5d6abcc04d1d37c85df5dc543ba0e

  • SHA1

    a6256e0aa101fc07319f19d6908f174ed8d14f5f

  • SHA256

    0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31

  • SHA512

    5d5f1d000d3ee111b01aa7df044357778c5701848a3672de6817c2cb3452843bc8408f7e31cca1f3321ced0c444f9e6425ca419ef03a397d5f12e4736d31d18a

Malware Config

Extracted

Family

alienbot

C2

http://cupboardg2irl3c.com

Targets

    • Target

      0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.jar

    • Size

      3.7MB

    • MD5

      6cf5d6abcc04d1d37c85df5dc543ba0e

    • SHA1

      a6256e0aa101fc07319f19d6908f174ed8d14f5f

    • SHA256

      0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31

    • SHA512

      5d5f1d000d3ee111b01aa7df044357778c5701848a3672de6817c2cb3452843bc8408f7e31cca1f3321ced0c444f9e6425ca419ef03a397d5f12e4736d31d18a

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks