General

  • Target

    93288d18a7b43661a17f96955abb281e61df450ba2e4c7840ce9fd0e17ab8f77

  • Size

    1.7MB

  • Sample

    220708-ssp3kafgbr

  • MD5

    dad9de0c3fa9b80dc1bc12535b851b5b

  • SHA1

    2adf44682703a85953d8c4a550e3373e7a89e046

  • SHA256

    93288d18a7b43661a17f96955abb281e61df450ba2e4c7840ce9fd0e17ab8f77

  • SHA512

    77a2181c643f920179262e7e50dbc92211955ea94ee141c53a7b0bc39d9b3725c09bcb8537e60bce551853aabb7714cec3bf0ee45db256edc9534ec6b606629b

Malware Config

Extracted

Family

alienbot

C2

http://botduke1.ug

Targets

    • Target

      93288d18a7b43661a17f96955abb281e61df450ba2e4c7840ce9fd0e17ab8f77

    • Size

      1.7MB

    • MD5

      dad9de0c3fa9b80dc1bc12535b851b5b

    • SHA1

      2adf44682703a85953d8c4a550e3373e7a89e046

    • SHA256

      93288d18a7b43661a17f96955abb281e61df450ba2e4c7840ce9fd0e17ab8f77

    • SHA512

      77a2181c643f920179262e7e50dbc92211955ea94ee141c53a7b0bc39d9b3725c09bcb8537e60bce551853aabb7714cec3bf0ee45db256edc9534ec6b606629b

    • Alienbot

      Alienbot is a fork of Cerberus banker first seen in January 2020.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks