General

  • Target

    05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk

  • Size

    2.4MB

  • Sample

    220602-nh27xsffc5

  • MD5

    ff8585c2fde047bf8ae5c96093ef6eaa

  • SHA1

    ce736f02647c6527de72d0efe6693921a79d5b19

  • SHA256

    05da8e7de864574f02b5d59fdc678e43ddb3a68b30cea06768323072c38ebeab

  • SHA512

    1a2d23aa0ce2a511781d787378d3540185518b9ac49c1e63aaab53e390b26d39fbd36fd7b2e510f27cc08ff7a898c4b163bd3945c06b3ed61d1c2db9477efd50

Malware Config

Extracted

Family

alienbot

C2

http://ukalasey5.com

Targets

    • Target

      05DA8E7DE864574F02B5D59FDC678E43DDB3A68B30CEA06768323072C38EBEAB.apk

    • Size

      2.4MB

    • MD5

      ff8585c2fde047bf8ae5c96093ef6eaa

    • SHA1

      ce736f02647c6527de72d0efe6693921a79d5b19

    • SHA256

      05da8e7de864574f02b5d59fdc678e43ddb3a68b30cea06768323072c38ebeab

    • SHA512

      1a2d23aa0ce2a511781d787378d3540185518b9ac49c1e63aaab53e390b26d39fbd36fd7b2e510f27cc08ff7a898c4b163bd3945c06b3ed61d1c2db9477efd50

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks