General

  • Target

    AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk

  • Size

    2.1MB

  • Sample

    220603-hbf38abgh8

  • MD5

    b144ce370f3442838357a36bec154877

  • SHA1

    88cca5b0b6ca6ef5bd0569f5ded4236cf40021b5

  • SHA256

    af4be859f940c75bda872242ab47a0d725274002d8a2f0f5c3575512180519f6

  • SHA512

    42c43f3d8dc5a734550835e7da2fff32bfff4f426bfd81f7d9767c081948f1f8c82c29ea5366c29c511f4864ce177393cf234e827464463c52d6ade33f0a02ee

Malware Config

Extracted

Family

alienbot

C2

http://akarbvc11.site

Targets

    • Target

      AF4BE859F940C75BDA872242AB47A0D725274002D8A2F0F5C3575512180519F6.apk

    • Size

      2.1MB

    • MD5

      b144ce370f3442838357a36bec154877

    • SHA1

      88cca5b0b6ca6ef5bd0569f5ded4236cf40021b5

    • SHA256

      af4be859f940c75bda872242ab47a0d725274002d8a2f0f5c3575512180519f6

    • SHA512

      42c43f3d8dc5a734550835e7da2fff32bfff4f426bfd81f7d9767c081948f1f8c82c29ea5366c29c511f4864ce177393cf234e827464463c52d6ade33f0a02ee

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks