General

  • Target
    36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk
  • Size 1.9MB
  • Sample220603-g5ea2sfdhl
  • SHA256 36fc4b0c5469c8af65f9efdc0d99a1b686a6df9a3e49336177ee73300f62ba5b
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • alienbot

C2
  • http://zeus45-3.com

Targets

    • Target
      36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk
    • Size 1.9MB
    • SHA256 36fc4b0c5469c8af65f9efdc0d99a1b686a6df9a3e49336177ee73300f62ba5b
    • MD5 SHA1 SHA512
    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks