General

  • Target

    4d8344cc821d3077fd54ff3b6aa485cbdc13f746a21950a46dc944a80117028a

  • Size

    2.4MB

  • Sample

    220508-k8qd9shafl

  • MD5

    c14b4c842993b2a9b4a284556f79652c

  • SHA1

    0dd33a7bb6e5d540a67a4eae109a4258cd0cfb81

  • SHA256

    4d8344cc821d3077fd54ff3b6aa485cbdc13f746a21950a46dc944a80117028a

  • SHA512

    3cdfbff24eb0baf0be09ee67492042ee762998008aa4c9e4eba4b6e719ba5c85bcddc9f8125d13576073ca77e97e578429455362f9ff96b72f8fe92a6ff995ca

Malware Config

Extracted

Family

alienbot

C2

http://motorgamingbsa.site

Targets

    • Target

      4d8344cc821d3077fd54ff3b6aa485cbdc13f746a21950a46dc944a80117028a

    • Size

      2.4MB

    • MD5

      c14b4c842993b2a9b4a284556f79652c

    • SHA1

      0dd33a7bb6e5d540a67a4eae109a4258cd0cfb81

    • SHA256

      4d8344cc821d3077fd54ff3b6aa485cbdc13f746a21950a46dc944a80117028a

    • SHA512

      3cdfbff24eb0baf0be09ee67492042ee762998008aa4c9e4eba4b6e719ba5c85bcddc9f8125d13576073ca77e97e578429455362f9ff96b72f8fe92a6ff995ca

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks