General

  • Target

    e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994

  • Size

    2.0MB

  • Sample

    220524-2pg28aafc7

  • MD5

    2889580b4a3cb93a28cf8eca33193a2b

  • SHA1

    5c981633b21ded1661a70b373a75470fba3f26cf

  • SHA256

    e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994

  • SHA512

    130c048463d43c2564924ec86ef6861b5f3619f640c8c0d1e1ef185f7c4dab20b6360d3755b317f5a3b9ce54ab8a3c0922bb19fd1ea604bfccfe0bf72f2bd4ec

Malware Config

Extracted

Family

alienbot

C2

http://burdamedemisin.top

Targets

    • Target

      e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994

    • Size

      2.0MB

    • MD5

      2889580b4a3cb93a28cf8eca33193a2b

    • SHA1

      5c981633b21ded1661a70b373a75470fba3f26cf

    • SHA256

      e580133d5a564148a66bc8cb6e3cf4f673d089711f6e5607e417d0eb22123994

    • SHA512

      130c048463d43c2564924ec86ef6861b5f3619f640c8c0d1e1ef185f7c4dab20b6360d3755b317f5a3b9ce54ab8a3c0922bb19fd1ea604bfccfe0bf72f2bd4ec

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks