General

  • Target

    73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b

  • Size

    2.0MB

  • Sample

    220524-3r38xacad5

  • MD5

    43b6ca712be5a971182a1e981c0f9d5f

  • SHA1

    9175769071b277e3230dfdb94d2cb1d19e8b7341

  • SHA256

    73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b

  • SHA512

    d00650e98ea177513ad3488cfc15b1d4a4130da4e05d4fe911a17bd829b955fd74642fd7a9f59b628a712a591a6f649ba3c6c9197b3f461fd0bf9ddf294c3a50

Malware Config

Extracted

Family

alienbot

C2

http://roseletters.top

Targets

    • Target

      73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b

    • Size

      2.0MB

    • MD5

      43b6ca712be5a971182a1e981c0f9d5f

    • SHA1

      9175769071b277e3230dfdb94d2cb1d19e8b7341

    • SHA256

      73f628bcf2f8618d49ca03ac59b7da23df28131a76b450a3b9254751afef6c1b

    • SHA512

      d00650e98ea177513ad3488cfc15b1d4a4130da4e05d4fe911a17bd829b955fd74642fd7a9f59b628a712a591a6f649ba3c6c9197b3f461fd0bf9ddf294c3a50

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks