General

  • Target

    a82289b97d4d7fd36a93c7400252aa3f82201af9a6eb7ed4066e3cff283859c9

  • Size

    1.8MB

  • Sample

    220524-vcz9psdhar

  • MD5

    308cf755d3432fea0483e98a2a196fd7

  • SHA1

    2dd61d6abd223731dd79b90f02ddadf534f9fe70

  • SHA256

    a82289b97d4d7fd36a93c7400252aa3f82201af9a6eb7ed4066e3cff283859c9

  • SHA512

    e0063de50ec1b516b94ea40034f79b6f848908f335bac416caffde884dda09a4dd4843a7348640b07e34bd9cb1a65cebe22531ee7ac37b1dbdd3a4592f23bbcb

Malware Config

Extracted

Family

alienbot

C2

http://aladinmaladingo.xyz

Targets

    • Target

      a82289b97d4d7fd36a93c7400252aa3f82201af9a6eb7ed4066e3cff283859c9

    • Size

      1.8MB

    • MD5

      308cf755d3432fea0483e98a2a196fd7

    • SHA1

      2dd61d6abd223731dd79b90f02ddadf534f9fe70

    • SHA256

      a82289b97d4d7fd36a93c7400252aa3f82201af9a6eb7ed4066e3cff283859c9

    • SHA512

      e0063de50ec1b516b94ea40034f79b6f848908f335bac416caffde884dda09a4dd4843a7348640b07e34bd9cb1a65cebe22531ee7ac37b1dbdd3a4592f23bbcb

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks