Overview

overview

10

Static

static

10

d2ad6d2b36...1).apk

android_x86

10

d2ad6d2b36...1).apk

android_x64

10

d2ad6d2b36...1).apk

android_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d2ad6d2b364b5984d7762c29eccfab703e6107cb8abca25f338822326710e399 (1).apk
  • Size 286KB
  • Sample220216-m3wefabfb2
  • SHA256 d2ad6d2b364b5984d7762c29eccfab703e6107cb8abca25f338822326710e399
  • MD5 SHA1 SHA512
Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

  • anubis

C2

  • http://localhost/anubis

Targets

    • Target
      d2ad6d2b364b5984d7762c29eccfab703e6107cb8abca25f338822326710e399 (1).apk
    • Size 286KB
    • SHA256 d2ad6d2b364b5984d7762c29eccfab703e6107cb8abca25f338822326710e399
    • MD5 SHA1 SHA512
    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks