Analysis

  • max time kernel
    2732644s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 06:39

General

  • Target
    737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a.apk
  • Size 4.4MB
  • Sample220508-hemp6shfc4
  • SHA256 737a5dfbd4a91c8f760ea9137c82b8d1318e410f0e1f2875da96b50c01040d5a
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Anubis banker

    Android banker that uses overlays.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts
    1⤵
    • Loads dropped Dex/Jar
    PID:6338
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6424
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6539
        • getprop ro.miui.ui.version.name
          2⤵
            PID:6557

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              RGeAWg.json

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json
              • Size 2.1MB
              • SHA256 b4e7947d3966b65fc0c3eca2b5f65408ef4eb044bdcb79739853dc7b5e784ca9
              • MD5 SHA1 SHA512 SSDEEP

              RGeAWg.json

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json
              • Size 2.1MB
              • SHA256 1528c59ec3d279b2524e32165cadb1091659c81caee740f71918b71ebfda7641
              • MD5 SHA1 SHA512 SSDEEP

              RGeAWg.json

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_DynamicOptDex/RGeAWg.json
              • Size 2.1MB
              • SHA256 1528c59ec3d279b2524e32165cadb1091659c81caee740f71918b71ebfda7641
              • MD5 SHA1 SHA512 SSDEEP

              index

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/GPUCache/index
              • Size 48B
              • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
              • MD5 SHA1 SHA512

              temp-index

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/GPUCache/index-dir/temp-index
              • Size 96B
              • SHA256 dca2c103d1f5c696edd4f6b0dbc7704c79b2636a62f7ce37ccc4600bfa2ab1e1
              • MD5 SHA1 SHA512

              Web Data

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/Web Data
              • Size 112KB
              • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
              • MD5 SHA1 SHA512 SSDEEP

              Web Data-journal

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/Web Data-journal
              • Size 1KB
              • SHA256 25de18470b6cbea03327e3a556fb6c67c39e499bfe676ba58df2baff22fd430d
              • MD5 SHA1 SHA512

              metrics_guid

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/app_webview/metrics_guid
              • Size 36B
              • SHA256 73fc5f825691761d01875b3d1cbc383415e480fd56870985bba9bdd87fa0d665
              • MD5 SHA1 SHA512

              settings.dat

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/cache/WebView/Crashpad/settings.dat
              • Size 40B
              • SHA256 ad4f08acb647e06915ed85b0a692bc8f06d8c66c7bd5e6ffd7d864d5b7d870d2
              • MD5 SHA1 SHA512

              index

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/cache/org.chromium.android_webview/Code Cache/js/index
              • Size 48B
              • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
              • MD5 SHA1 SHA512

              temp-index

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
              • Size 96B
              • SHA256 79e97aa981a1fb9ace18d806afe8781169b8fb19c9a830d0a67baf507918ed0c
              • MD5 SHA1 SHA512

              WebViewChromiumPrefs.xml

              • Path /data/user/0/uapogrb.wegnzoultussxuqk.zkxktunmpqgmutfkenkfmlts/shared_prefs/WebViewChromiumPrefs.xml
              • Size 127B
              • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
              • MD5 SHA1 SHA512