General

  • Target

    32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk

  • Size

    1.8MB

  • Sample

    220603-g78yfaffbq

  • MD5

    e07dd64ed4031f2335f378c3c8a92ad4

  • SHA1

    b5a40dcc077c4fe6c6b124a11d429d6fbd403184

  • SHA256

    32376baf8d01ab49e8a4b35ec35bc27fab99b66bcefcb160a7878e724d68bc3d

  • SHA512

    25f3e93d5f4508549600e8da98d124431efc97f80101bf888100c9722beae4d025b77a8af93d75cd1091030e0ad81d46e3d6eb6b306328686f2122ff10aeccc3

Malware Config

Extracted

Family

alienbot

C2

http://cacecarsa4.com

Targets

    • Target

      32376BAF8D01AB49E8A4B35EC35BC27FAB99B66BCEFCB160A7878E724D68BC3D.apk

    • Size

      1.8MB

    • MD5

      e07dd64ed4031f2335f378c3c8a92ad4

    • SHA1

      b5a40dcc077c4fe6c6b124a11d429d6fbd403184

    • SHA256

      32376baf8d01ab49e8a4b35ec35bc27fab99b66bcefcb160a7878e724d68bc3d

    • SHA512

      25f3e93d5f4508549600e8da98d124431efc97f80101bf888100c9722beae4d025b77a8af93d75cd1091030e0ad81d46e3d6eb6b306328686f2122ff10aeccc3

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks