General

  • Target

    7B5F6D8B93D3DBE982F87BE3988B7323CBA198944E2AFDC2B8143347FC17DBCF.apk

  • Size

    2.1MB

  • Sample

    220602-nhdjkaffa7

  • MD5

    29914c9b705f3446486261c1081aeccf

  • SHA1

    787c4a114cb1dc1ab91b93d35154b363778a8414

  • SHA256

    7b5f6d8b93d3dbe982f87be3988b7323cba198944e2afdc2b8143347fc17dbcf

  • SHA512

    b391917408018b5cf8e99d00462eeb08d9403a037458d0588e29d9d30b3dbd719d7ffa4a0c8118bbd24240c7440ae4edd979760263eb7f82ab33fedb5ac5b801

Malware Config

Extracted

Family

alienbot

C2

http://apk-file.ru.com

Targets

    • Target

      7B5F6D8B93D3DBE982F87BE3988B7323CBA198944E2AFDC2B8143347FC17DBCF.apk

    • Size

      2.1MB

    • MD5

      29914c9b705f3446486261c1081aeccf

    • SHA1

      787c4a114cb1dc1ab91b93d35154b363778a8414

    • SHA256

      7b5f6d8b93d3dbe982f87be3988b7323cba198944e2afdc2b8143347fc17dbcf

    • SHA512

      b391917408018b5cf8e99d00462eeb08d9403a037458d0588e29d9d30b3dbd719d7ffa4a0c8118bbd24240c7440ae4edd979760263eb7f82ab33fedb5ac5b801

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks