General

  • Target

    34a1acac2b2a9bb5c5601113fbd33ffb433d2782c74490a419271dd9e154e2f3

  • Size

    2.0MB

  • Sample

    220525-a17cpsddh7

  • MD5

    102d826897066891e862bc0b3c8ff335

  • SHA1

    daedd10e120ddce28d42dadc8ec040cf52a76657

  • SHA256

    34a1acac2b2a9bb5c5601113fbd33ffb433d2782c74490a419271dd9e154e2f3

  • SHA512

    84f7b2a4bdb63682406feba00dcb4f47f89cb0c040f3a1a5aa2004c4280a4b90f048d5d0b4b0b549d947fc76272a3cbc8ddcdf2b04c897541a2341bb3ee9f18c

Malware Config

Extracted

Family

alienbot

C2

http://gesibaglarindadolaniyorumm.top

Targets

    • Target

      34a1acac2b2a9bb5c5601113fbd33ffb433d2782c74490a419271dd9e154e2f3

    • Size

      2.0MB

    • MD5

      102d826897066891e862bc0b3c8ff335

    • SHA1

      daedd10e120ddce28d42dadc8ec040cf52a76657

    • SHA256

      34a1acac2b2a9bb5c5601113fbd33ffb433d2782c74490a419271dd9e154e2f3

    • SHA512

      84f7b2a4bdb63682406feba00dcb4f47f89cb0c040f3a1a5aa2004c4280a4b90f048d5d0b4b0b549d947fc76272a3cbc8ddcdf2b04c897541a2341bb3ee9f18c

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks