General

  • Target

    7DCB987D39106EBB91CDE38CDB87E43377963014722A4D49B2C49370AD54AE82.apk

  • Size

    2.4MB

  • Sample

    220603-g9sdgabga6

  • MD5

    3516d7b0d815d8c48dd6785c1b885e4c

  • SHA1

    af9d581f7ab4871c6dde28e0bd277ac370e67396

  • SHA256

    7dcb987d39106ebb91cde38cdb87e43377963014722a4d49b2c49370ad54ae82

  • SHA512

    ddcedf17501d7c5fd004c32d377cf8429bc116acda3c9b5ab0928f757072bd7a7e75b050d601f3fd18549bb5804373d047704c68763beaaaf6c31e1b15c10040

Malware Config

Extracted

Family

alienbot

C2

http://perohi21.xyz

Targets

    • Target

      7DCB987D39106EBB91CDE38CDB87E43377963014722A4D49B2C49370AD54AE82.apk

    • Size

      2.4MB

    • MD5

      3516d7b0d815d8c48dd6785c1b885e4c

    • SHA1

      af9d581f7ab4871c6dde28e0bd277ac370e67396

    • SHA256

      7dcb987d39106ebb91cde38cdb87e43377963014722a4d49b2c49370ad54ae82

    • SHA512

      ddcedf17501d7c5fd004c32d377cf8429bc116acda3c9b5ab0928f757072bd7a7e75b050d601f3fd18549bb5804373d047704c68763beaaaf6c31e1b15c10040

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks