General

  • Target

    BC7A85130B13D5AD0B20925CD09CC6D6AA6B1EF29C2DD580332F9DA4B744E85D.apk

  • Size

    2.3MB

  • Sample

    220603-g43l9afdfp

  • MD5

    7f8726139ab404f74a02a1655c047c06

  • SHA1

    ba76e860f00f06b52eefc97e3e6017220a7197db

  • SHA256

    bc7a85130b13d5ad0b20925cd09cc6d6aa6b1ef29c2dd580332f9da4b744e85d

  • SHA512

    51b5b2b07a7257853f414e0c4e4a23d4efa19b59c73ae480e8d0e073ae5fba7f076e2e957973ac4e36c5b880a5fca14ba0e8516a2a3b538c79212863fc858c9c

Malware Config

Extracted

Family

alienbot

C2

http://abdsc3.site

Targets

    • Target

      BC7A85130B13D5AD0B20925CD09CC6D6AA6B1EF29C2DD580332F9DA4B744E85D.apk

    • Size

      2.3MB

    • MD5

      7f8726139ab404f74a02a1655c047c06

    • SHA1

      ba76e860f00f06b52eefc97e3e6017220a7197db

    • SHA256

      bc7a85130b13d5ad0b20925cd09cc6d6aa6b1ef29c2dd580332f9da4b744e85d

    • SHA512

      51b5b2b07a7257853f414e0c4e4a23d4efa19b59c73ae480e8d0e073ae5fba7f076e2e957973ac4e36c5b880a5fca14ba0e8516a2a3b538c79212863fc858c9c

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks