General

  • Target

    cc5f4a18e941c2fa4a18eef960d33d1a117ad25c58cd918d41fccf16c3e0097e

  • Size

    336KB

  • Sample

    220524-3ke8habgb2

  • MD5

    2029dc4e50b8ef17073bca6c129afd1b

  • SHA1

    c36f206e599359cbf9a64b409713c5d21c6d5009

  • SHA256

    cc5f4a18e941c2fa4a18eef960d33d1a117ad25c58cd918d41fccf16c3e0097e

  • SHA512

    9ec1d1425c2e051d4c75f9db17918fff1a3dbacfa22827f9cd2ab320a1e75f1703e0da98f63cf49a4eff93a92c8c4452d4de1687f7bd7f5b8e05d1fccd498421

Malware Config

Extracted

Family

alienbot

C2

http://digitalmark.top

Targets

    • Target

      cc5f4a18e941c2fa4a18eef960d33d1a117ad25c58cd918d41fccf16c3e0097e

    • Size

      336KB

    • MD5

      2029dc4e50b8ef17073bca6c129afd1b

    • SHA1

      c36f206e599359cbf9a64b409713c5d21c6d5009

    • SHA256

      cc5f4a18e941c2fa4a18eef960d33d1a117ad25c58cd918d41fccf16c3e0097e

    • SHA512

      9ec1d1425c2e051d4c75f9db17918fff1a3dbacfa22827f9cd2ab320a1e75f1703e0da98f63cf49a4eff93a92c8c4452d4de1687f7bd7f5b8e05d1fccd498421

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks