Resubmissions

02/04/2024, 06:58

240402-hrp13aae2w8

13/08/2020, 12:07

200813-m8qffw1xej10

General

  • Target
    18832427a4a7dd1c2960a40fc13fc0dfc5357ecafdf7dae9f89d721f4138bc25
  • Size 1.6MB
  • Sample200813-m8qffw1xej
  • SHA256 18832427a4a7dd1c2960a40fc13fc0dfc5357ecafdf7dae9f89d721f4138bc25
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • anubis

C2
  • http://ktosdelaetskrintotpidor.com

  • http://sositehuypidarasi.com

Targets

    • Target
      18832427a4a7dd1c2960a40fc13fc0dfc5357ecafdf7dae9f89d721f4138bc25
    • Size 1.6MB
    • SHA256 18832427a4a7dd1c2960a40fc13fc0dfc5357ecafdf7dae9f89d721f4138bc25
    • MD5 SHA1 SHA512
    • Anubis banker

      Android banker that uses overlays.

    • Removes its main activity from the application launcher

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks