General

  • Target

    59089985DB9E1D46BB479FADD564109E8EF3B0244B560B212C81F331162E0EC3.apk

  • Size

    2.0MB

  • Sample

    220602-ndhmqafed6

  • MD5

    e8dc405c17168d4ed1ee79908be2f484

  • SHA1

    c5c929cdbe1bd7536e98d81fc27308578a4ab06f

  • SHA256

    59089985db9e1d46bb479fadd564109e8ef3b0244b560b212c81f331162e0ec3

  • SHA512

    477f97bbf8fa2fe309d0f441cd8ce009181a6ef99b7bf966e5e21f33994a1331fe66f4750710fab4f4cfe7b00148ec82750e7b552921ce28b243f881c2a0517d

Malware Config

Extracted

Family

alienbot

C2

http://kurutses13.com

Targets

    • Target

      59089985DB9E1D46BB479FADD564109E8EF3B0244B560B212C81F331162E0EC3.apk

    • Size

      2.0MB

    • MD5

      e8dc405c17168d4ed1ee79908be2f484

    • SHA1

      c5c929cdbe1bd7536e98d81fc27308578a4ab06f

    • SHA256

      59089985db9e1d46bb479fadd564109e8ef3b0244b560b212c81f331162e0ec3

    • SHA512

      477f97bbf8fa2fe309d0f441cd8ce009181a6ef99b7bf966e5e21f33994a1331fe66f4750710fab4f4cfe7b00148ec82750e7b552921ce28b243f881c2a0517d

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks