General

  • Target

    2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862

  • Size

    1.9MB

  • Sample

    220525-aq38asghak

  • MD5

    49a51ccaddafd8674f6a77b33f390ac9

  • SHA1

    4fa6ff4b62ae881de087323fb8122804cfaf8b58

  • SHA256

    2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862

  • SHA512

    666d180d815753b31e98a5419a38327c0e2f1fc19000f7bef90c6c15a2b961d6ea7cdce5bd6e540c3832233c29189ff6d9c40fe8337dc875ea6acde6b7e52828

Malware Config

Extracted

Family

alienbot

C2

http://ssssssthaniyokmugulduren.site

Targets

    • Target

      2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862

    • Size

      1.9MB

    • MD5

      49a51ccaddafd8674f6a77b33f390ac9

    • SHA1

      4fa6ff4b62ae881de087323fb8122804cfaf8b58

    • SHA256

      2a9e071cfe01f2ab4ccbb96a5842006fbc29f8c369de6f83ef84212ad0655862

    • SHA512

      666d180d815753b31e98a5419a38327c0e2f1fc19000f7bef90c6c15a2b961d6ea7cdce5bd6e540c3832233c29189ff6d9c40fe8337dc875ea6acde6b7e52828

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks