Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

163c2cff8c...9f.apk

android_x86

10

163c2cff8c...9f.apk

android_x64

10

163c2cff8c...9f.apk

android_x64

10

Analysis

  • max time kernel
    4079747s
  • max time network
    175s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    13/02/2022, 12:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    163c2cff8cd941dbce727de2df9df5fdfaaddde8f6d3db86270e2abf7e0ea19f.apk

  • Size

    2.2MB

  • MD5

    43af9a0afff6a08f37ae4426a87fd5bf

  • SHA1

    9a441ece55c1beb6011891918cfc27877fb5c911

  • SHA256

    163c2cff8cd941dbce727de2df9df5fdfaaddde8f6d3db86270e2abf7e0ea19f

  • SHA512

    5704c3016dca1f6763d44fc72826a041f8a55214d195f5ffb15d06b3bec025ac8fe6c5d7a8c01ad3bcf111a3d9a1e38076c99f3cf43700934d099b99d808e738

Score
10/10
alienbotbankerinfostealertrojan

Malware Config

Extracted

Family

alienbot

C2

http://fsadkafasdkfka.xyz

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

    bankertrojaninfostealeralienbot
  • Checks Qemu related system properties. 1 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw
    1⤵
    • Checks Qemu related system properties.
    • Loads dropped Dex/Jar
    PID:3846
    • ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw
      2⤵
        PID:3923
      • getprop
        2⤵
          PID:3923
        • ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw
          2⤵
            PID:3973
          • getprop
            2⤵
              PID:3973
            • ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw
              2⤵
                PID:4013
              • getprop
                2⤵
                  PID:4013
                • ldpgteqpernpguirqtltzsyegxj.edllabrcpucxwbbysloruoiaw.xmbzotblnfxjjbbatmnbluskpgw
                  2⤵
                    PID:4035

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads