General

  • Target

    4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24

  • Size

    1.7MB

  • Sample

    220520-gzmp8sgecr

  • MD5

    ec8896a5a8041cedf5479bab6a8601bf

  • SHA1

    e97e32d1cbc26c13f708c13f0d61a0b6b50384c2

  • SHA256

    4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24

  • SHA512

    9fe6a8f2caf14a646b97cd23e19b84fefbd2cc2b15b3c665adffcf733927c424b718b5bbcd255ce070e476f6d3b9e0dede7749211e2d20e85c5dfb9986e13537

Malware Config

Extracted

Family

alienbot

C2

http://fillimillidilli.top

Targets

    • Target

      4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24

    • Size

      1.7MB

    • MD5

      ec8896a5a8041cedf5479bab6a8601bf

    • SHA1

      e97e32d1cbc26c13f708c13f0d61a0b6b50384c2

    • SHA256

      4a7adde4bea53ce1adf56e119f8a28d3c135ab265f20d5b53fe54c728999da24

    • SHA512

      9fe6a8f2caf14a646b97cd23e19b84fefbd2cc2b15b3c665adffcf733927c424b718b5bbcd255ce070e476f6d3b9e0dede7749211e2d20e85c5dfb9986e13537

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks