anubis | 97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b | Triage™

Analysis

max time kernel
37011s
max time network
126s
platform
android_x64
resource
android-x64-arm64
submitted
16/02/2022, 11:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b.apk
Size 1.2MB
Sample220216-m5halabfb4
SHA256 97a996a7a92cfea559d747d21968dd680185800ba9ceeb744af6253bf51ea75b
MD5 f939dcb0397206e433f835a4b7fc1691
SHA1 04e4b720fbaa4d391c13b87463bcad77a94cd9f8
SHA512 4ca88864c428e01f87a6ffd2824e4399e3c09344b6724869fa04a8fe1c1a81950e2742c9c2e12676fa297a77e273331cedda5cb6eb74dee918943d1a8a5dfa4b
MD5 SHA1 SHA512

Score

10^/10

anubis banker evasion infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.tackle.jealous/app_DynamicOptDex/wcaWTQC.json	5626	com.tackle.jealous

Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.tackle.jealous

com.tackle.jealous
1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:5626

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads