General

  • Target

    8BEBC8534BCD0E053862BD5FB4372184A839CDE85F1B9AAC18A887C64EEEA68A.apk

  • Size

    2.4MB

  • Sample

    220602-lmqzcaegf7

  • MD5

    76cb07005d195f9acc37ce76ff6df8d1

  • SHA1

    747a3561268d733ac47cc8ed0e14b5095991ec46

  • SHA256

    8bebc8534bcd0e053862bd5fb4372184a839cde85f1b9aac18a887c64eeea68a

  • SHA512

    504f38e17f93abd2b46cdefc8a13b1e461708026ad47191eed7a8704e35b57fcd3eaa57d44440c450b8873ff04edbd6249aca4ff397c49f55d3d85706de4685a

Malware Config

Extracted

Family

alienbot

C2

http://ukalasey5.com

Targets

    • Target

      8BEBC8534BCD0E053862BD5FB4372184A839CDE85F1B9AAC18A887C64EEEA68A.apk

    • Size

      2.4MB

    • MD5

      76cb07005d195f9acc37ce76ff6df8d1

    • SHA1

      747a3561268d733ac47cc8ed0e14b5095991ec46

    • SHA256

      8bebc8534bcd0e053862bd5fb4372184a839cde85f1b9aac18a887c64eeea68a

    • SHA512

      504f38e17f93abd2b46cdefc8a13b1e461708026ad47191eed7a8704e35b57fcd3eaa57d44440c450b8873ff04edbd6249aca4ff397c49f55d3d85706de4685a

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks