anubis | 63263048a73fd8b6e37431688a331a2a88e8fc86848bfb4ba09751f2e7ab8f5c | Triage™

Analysis

max time kernel
3395885s
max time network
161s
platform
android_x86
resource
android-x86-arm
submitted
05/02/2022, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
63263048a73fd8b6e37431688a331a2a88e8fc86848bfb4ba09751f2e7ab8f5c.apk
Size 627KB
Sample220205-sdlftscgcr
SHA256 63263048a73fd8b6e37431688a331a2a88e8fc86848bfb4ba09751f2e7ab8f5c
MD5 da8fa0b8fa47406c9e18590e6673cb54
SHA1 d6549c47126fdccf9df71b4b0bed72c279dbb43f
SHA512 b00dd18693dbec366cd14788fe99625e8476e29a34aaa6abd8e31dbf2e2f596efd10e2f0ce6c07bbc4cb0449c2be145a3bd41f394f150ec087b7b3428d1e78e7
MD5 SHA1 SHA512

Score

10^/10

anubis banker infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis

Makes use of the framework's Accessibility service. 1 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	anubis.bot.myapplication

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	anubis.bot.myapplication

Reads information about phone network operator.

anubis.bot.myapplication
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
PID:4901

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads