Analysis
- max time kernel
2732644s - max time network
162s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 06:39
Static task
static1
Behavioral task
behavioral1
Sample
737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a.apk
- Size 4.4MB
- Sample220508-hemp6shfc4
- SHA256 737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a
- MD5 d705c6d8c8f848bf7cd1185f683dc8fc
- SHA1 4d5a236c3c8a8799727e267d37a7c7db1b340e2e
- SHA512 bfb1c811121cf2034e091dd38f04b4fd8b3f9cdfdffcc0e9807b6893355f69a4d7dfc24fc4f539ff2c364b49058643475ca8623e6f2612dc4ffc7eeaa7944f63
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Anubis banker
Android banker that uses overlays.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json 6338 uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json 6338 uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts - Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json
- Size 2.1MB
- SHA256 b4e7947d3966b65fc0c3eca2b5f65408ef4eb044bdcb79739853dc7b5e784ca9
- MD5 18123ae82661f7ba401bf44291ade38d
- SHA1 900d73d4c1caa2bfb7621b144b0406a69db21479
- SHA512 28ce45d6c225bbc0c0a70e6e4e6e33578215f36f789dc3518c07914c7cc1b7da4a16d53fca407d5afece957e4642d046e81ec20cc72ffb97e67e2fa4d60f4667
- SSDEEP 49152:sHMKbB0acy5IHoASLbZjA+qgOdjMux/tjv8jvN+IkDTXVGR:TKl0ByIoASLNDnyNx/Jo1+VDLVS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json
- Size 2.1MB
- SHA256 1528c59ec3d279b2524e32165cadb1091659c81caee740f71918b71ebfda7641
- MD5 57cc6090be9c1a51714aa8a4f4b73400
- SHA1 842236d47d5b5e98d5abfe3c9c03729173bbc970
- SHA512 79c9aeb35afd13cc68010c141ff6396df1da3892fe30520765dcac3e3e2c2dd5e4f6be160fba42748dd45dad18f06dc30d94d962153e557b991c4826cb9ae93c
- SSDEEP 24576:Lfg+nFrdvtqHvlEynaNG/HNiy5+Tyvv7XcEM9IAexK9Wq2rS:LY+nwak+8M9IJK9xaS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json
- Size 2.1MB
- SHA256 1528c59ec3d279b2524e32165cadb1091659c81caee740f71918b71ebfda7641
- MD5 57cc6090be9c1a51714aa8a4f4b73400
- SHA1 842236d47d5b5e98d5abfe3c9c03729173bbc970
- SHA512 79c9aeb35afd13cc68010c141ff6396df1da3892fe30520765dcac3e3e2c2dd5e4f6be160fba42748dd45dad18f06dc30d94d962153e557b991c4826cb9ae93c
- SSDEEP 24576:Lfg+nFrdvtqHvlEynaNG/HNiy5+Tyvv7XcEM9IAexK9Wq2rS:LY+nwak+8M9IJK9xaS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 dca2c103d1f5c696edd4f6b0dbc7704c79b2636a62f7ce37ccc4600bfa2ab1e1
- MD5 017d6085f0933dd0ec9b9605332ffe91
- SHA1 80665938488ad1a7a4470518bbea651433c3df61
- SHA512 20519deb5eddb3f11b50285eef7f27b7108a54b03b3adc44e80d362fd9ee24a01ca47599f49aa12ba6e9fc8cdc6268764ada6b40ceafb4c2207a91ed83239ef0
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/Web Data
- Size 112KB
- SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
- MD5 b663831f8cc130493476d94f2d7a5330
- SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
- SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
- SSDEEP 96:ozaBdUDN1uKdlXfnaBdUDN1uKdlXf/eWbT6QfBE/g7rLH4y/5AIpEgeWbT6QfBEJ:owQfMQfHbTTNbTTa2Tgv2Tgz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/Web Data-journal
- Size 1KB
- SHA256 25de18470b6cbea03327e3a556fb6c67c39e499bfe676ba58df2baff22fd430d
- MD5 75c20f01ff2adc8bf2d79645b957cb51
- SHA1 ca20164a7bc984d182ff4db906b1caa783f99891
- SHA512 32e26e6eeb591c30c2ec17dec598d98e6bc854989f4720973d829612f8b019d42616a3d3ee67a44c639f98f0d29999a5cad285bde4cb733da583ef2bcd21bbb9
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/metrics_guid
- Size 36B
- SHA256 73fc5f825691761d01875b3d1cbc383415e480fd56870985bba9bdd87fa0d665
- MD5 79238926da75cb0685147b8f6ba3f365
- SHA1 c6ef9b66cf6073ce300d6818949a41654b5b28f6
- SHA512 bf77418733253387ac9bf0045fa7dfba984ae0cbde679b88f85e0e77476880205cacbe214324152cea6a2b9b640ecfb29ffe7b9d66f4aa089f4fe21d0eff10ba
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 ad4f08acb647e06915ed85b0a692bc8f06d8c66c7bd5e6ffd7d864d5b7d870d2
- MD5 af64d03b8560a2207cf497fadb2678a4
- SHA1 ecb4c4ad878f1f062833745d65152c3761264f84
- SHA512 ec283503edc8da66161b698eccb061fc4e47bf858c0f1281eeacf7dec9e3ad845e21bc0365858511a9a539c78fcf3f0de493178c87780bb918dc310ea431ca9e
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/cache/org.chromium.android_webview/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 79e97aa981a1fb9ace18d806afe8781169b8fb19c9a830d0a67baf507918ed0c
- MD5 f88e3dcd9c060684c113747bd4a3cd99
- SHA1 59a8624bb97fc84205febf55ed4011c8ec02b251
- SHA512 5ed575357bb7987e7b4e582d46c4b39d2cd326432b658978eba22cb098213f8fb1276c09462f4e0d7dce6be7a3c3d3335259a4af286fcdb461481a395537d3b1
- MD5 SHA1 SHA512
- Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
- MD5 6ef709b8536878951e87c29a1518fc2b
- SHA1 24376c70b00152501b3d98df61fa7db435339172
- SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
- MD5 SHA1 SHA512