General

  • Target

    3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk

  • Size

    1.8MB

  • Sample

    220603-g9k96affgl

  • MD5

    2c791cd2cc562ea19b946b2ec6821a8c

  • SHA1

    67cf7df79337555fa27118f9a749da843422c315

  • SHA256

    3549cea95ec003eed01fdea693f160ec73d2d3c455544557a0c8b98969f1551c

  • SHA512

    f938a706ce332104842532e8b0b1867828dd8d6848a01a5bfcc41c4f84a24e766e6dc3504b2c3db8221830bbd051b7aea45ba8eee64bb411446d0ab45d60d5f3

Malware Config

Extracted

Family

alienbot

C2

http://kamuranipisapa12.site

Targets

    • Target

      3549CEA95EC003EED01FDEA693F160EC73D2D3C455544557A0C8B98969F1551C.apk

    • Size

      1.8MB

    • MD5

      2c791cd2cc562ea19b946b2ec6821a8c

    • SHA1

      67cf7df79337555fa27118f9a749da843422c315

    • SHA256

      3549cea95ec003eed01fdea693f160ec73d2d3c455544557a0c8b98969f1551c

    • SHA512

      f938a706ce332104842532e8b0b1867828dd8d6848a01a5bfcc41c4f84a24e766e6dc3504b2c3db8221830bbd051b7aea45ba8eee64bb411446d0ab45d60d5f3

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks