General

  • Target

    F7C0F38E80C8B0D2878408CD5268996AB87049A6D4A62C843F8BC4494EF803EE.apk

  • Size

    2.6MB

  • Sample

    220602-nd8h5sbagp

  • MD5

    f3e07681b0e5cfde39edab65b27e533a

  • SHA1

    dfac4981dbfe15daf1990c4be18be722d3916ac9

  • SHA256

    f7c0f38e80c8b0d2878408cd5268996ab87049a6d4a62c843f8bc4494ef803ee

  • SHA512

    e94c5e166937537ea7a70afaa3fd2d8ae9520da845f84d2a01a57b4fdf768272027a674d719fc0bf3e7430b17129d61ff0f01e1b2f2ee97ea462072340474651

Malware Config

Extracted

Family

alienbot

C2

http://umhcubrail.xyz

Targets

    • Target

      F7C0F38E80C8B0D2878408CD5268996AB87049A6D4A62C843F8BC4494EF803EE.apk

    • Size

      2.6MB

    • MD5

      f3e07681b0e5cfde39edab65b27e533a

    • SHA1

      dfac4981dbfe15daf1990c4be18be722d3916ac9

    • SHA256

      f7c0f38e80c8b0d2878408cd5268996ab87049a6d4a62c843f8bc4494ef803ee

    • SHA512

      e94c5e166937537ea7a70afaa3fd2d8ae9520da845f84d2a01a57b4fdf768272027a674d719fc0bf3e7430b17129d61ff0f01e1b2f2ee97ea462072340474651

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks