Analysis
- max time kernel
37038s - max time network
155s - platform
android_x64 - resource
android-x64 - submitted
16/02/2022, 11:02
Static task
static1
Behavioral task
behavioral1
Sample
97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b.apk
Resource
android-x86-arm
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b.apk
Resource
android-x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b.apk
Resource
android-x64-arm64
0 signatures
0 seconds
General
- Target 97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b.apk
- Size 1.2MB
- Sample220216-m5halabfb4
- SHA256 97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b
- MD5 f939dcb0397206e433f835a4b7fc1691
- SHA1 04e4b720fbaa4d391c13b87463bcad77a94cd9f8
- SHA512 4ca88864c428e01f87a6ffd2824e4399e3c09344b6724869fa04a8fe1c1a81950e2742c9c2e12676fa297a77e273331cedda5cb6eb74dee918943d1a8a5dfa4b
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Anubis banker
Android banker that uses overlays.
- Checks Qemu related system properties. 1 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.gles com.tackle.jealous - Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.tackle.jealous/app_DynamicOptDex/wcaWTQC.json 3812 com.tackle.jealous - Reads information about phone network operator.
- Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.tackle.jealous