General

  • Target
    2b6c83dc1f0601e1c29270121eee020e8cd1b74ec61bb619a9c6b8008e587e26
  • Size 3.7MB
  • Sample200813-qmnhs1bcks
  • SHA256 2b6c83dc1f0601e1c29270121eee020e8cd1b74ec61bb619a9c6b8008e587e26
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • anubis

C2
  • http://ktosdelaetskrintotpidor.com

  • http://sositehuypidarasi.com

Targets

    • Target
      2b6c83dc1f0601e1c29270121eee020e8cd1b74ec61bb619a9c6b8008e587e26
    • Size 3.7MB
    • SHA256 2b6c83dc1f0601e1c29270121eee020e8cd1b74ec61bb619a9c6b8008e587e26
    • MD5 SHA1 SHA512
    • Anubis banker

      Android banker that uses overlays.

    • Removes its main activity from the application launcher

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

MITRE ATT&CK Matrix

Tasks