General

  • Target

    bdb76f13ac95ef5c3612f7c3dfe5b2146e52ba80c9fcf66a46e7830ca041485c

  • Size

    1.5MB

  • Sample

    220521-pjrcgsafcn

  • MD5

    4904d6f6da2cd5baa2845c1f0adb0796

  • SHA1

    64e207b60832d0ccab8b42ca91422e920b660ab5

  • SHA256

    bdb76f13ac95ef5c3612f7c3dfe5b2146e52ba80c9fcf66a46e7830ca041485c

  • SHA512

    e52e692205696b570f19f46eb4e08f45ac1786b9cc4f63085446b29b6b325b3dc3d7c79e1d8af34d6116dbf2c022ab3adfa2634dfd24ba1e22a11313ab52db80

Malware Config

Extracted

Family

alienbot

C2

http://installerflas453873.xyz

Targets

    • Target

      bdb76f13ac95ef5c3612f7c3dfe5b2146e52ba80c9fcf66a46e7830ca041485c

    • Size

      1.5MB

    • MD5

      4904d6f6da2cd5baa2845c1f0adb0796

    • SHA1

      64e207b60832d0ccab8b42ca91422e920b660ab5

    • SHA256

      bdb76f13ac95ef5c3612f7c3dfe5b2146e52ba80c9fcf66a46e7830ca041485c

    • SHA512

      e52e692205696b570f19f46eb4e08f45ac1786b9cc4f63085446b29b6b325b3dc3d7c79e1d8af34d6116dbf2c022ab3adfa2634dfd24ba1e22a11313ab52db80

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks