General

  • Target

    BB67C8D6B6A011C14443DE79246D12F4178C344F73550414886F849D0F5BC4EB.apk

  • Size

    2.1MB

  • Sample

    220602-ncdmdabadq

  • MD5

    b365a59f701c50ddfe445713b6573b11

  • SHA1

    837a51e21cd010d46afbb0a76571945dde9ed705

  • SHA256

    bb67c8d6b6a011c14443de79246d12f4178c344f73550414886f849d0f5bc4eb

  • SHA512

    21e0c5148f95fdb2d5fb24ba79c13533d33106b905581bf7d806c8d8e11f92c841a5dd70515d3f212ac2e464234b15d417d3e2b3dbee7c4638ce0fc5b8fe35a6

Malware Config

Extracted

Family

alienbot

C2

http://kasstismur.xyz

Targets

    • Target

      BB67C8D6B6A011C14443DE79246D12F4178C344F73550414886F849D0F5BC4EB.apk

    • Size

      2.1MB

    • MD5

      b365a59f701c50ddfe445713b6573b11

    • SHA1

      837a51e21cd010d46afbb0a76571945dde9ed705

    • SHA256

      bb67c8d6b6a011c14443de79246d12f4178c344f73550414886f849d0f5bc4eb

    • SHA512

      21e0c5148f95fdb2d5fb24ba79c13533d33106b905581bf7d806c8d8e11f92c841a5dd70515d3f212ac2e464234b15d417d3e2b3dbee7c4638ce0fc5b8fe35a6

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks