Analysis

  • max time kernel
    2740026s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 07:57

General

  • Target
    56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a.apk
  • Size 4.4MB
  • Sample220508-jtl8macae2
  • SHA256 56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Anubis banker

    Android banker that uses overlays.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg
    1⤵
    • Loads dropped Dex/Jar
    PID:6302
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6343
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6460
        • getprop ro.miui.ui.version.name
          2⤵
            PID:6484

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              qj.json

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json
              • Size 2.0MB
              • SHA256 3bd8d3655c5f5172220b5c46288c6143736388a8aa74f1a312bfe74b7ff4a121
              • MD5 SHA1 SHA512 SSDEEP

              qj.json

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json
              • Size 2.0MB
              • SHA256 ea025f95f10ecf7bc8c586ab5a5673c5710e5b5f34929842258c891f0a5e13d4
              • MD5 SHA1 SHA512 SSDEEP

              qj.json

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json
              • Size 2.0MB
              • SHA256 ea025f95f10ecf7bc8c586ab5a5673c5710e5b5f34929842258c891f0a5e13d4
              • MD5 SHA1 SHA512 SSDEEP

              index

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/GPUCache/index
              • Size 48B
              • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
              • MD5 SHA1 SHA512

              temp-index

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/GPUCache/index-dir/temp-index
              • Size 96B
              • SHA256 d5d0c90eb6a175f93e32939b9159d9b6f1f1370b7a2ed98a412950ca637ebd08
              • MD5 SHA1 SHA512

              Web Data

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/Web Data
              • Size 112KB
              • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
              • MD5 SHA1 SHA512 SSDEEP

              Web Data-journal

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/Web Data-journal
              • Size 1KB
              • SHA256 2b56e2b5b98e2ec7540f6294db4ad64145ef04691e7e97227a2ad8ad818989a0
              • MD5 SHA1 SHA512

              metrics_guid

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/metrics_guid
              • Size 36B
              • SHA256 641e585cf39a94b1f5b0cbdce797337edbd96179740b3ad1fb0cdfae8189a37e
              • MD5 SHA1 SHA512

              settings.dat

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/cache/WebView/Crashpad/settings.dat
              • Size 40B
              • SHA256 99ceb6c9b1a59b93cd9bc518c3549379680959c52447558c04a77c91035754b9
              • MD5 SHA1 SHA512

              index

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/cache/org.chromium.android_webview/Code Cache/js/index
              • Size 48B
              • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
              • MD5 SHA1 SHA512

              temp-index

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
              • Size 96B
              • SHA256 1b219fda6aeb3254ce6a1e0ae4ca7cd6fd310637b8ffaf8ba11f83c697ca0246
              • MD5 SHA1 SHA512

              WebViewChromiumPrefs.xml

              • Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/shared_prefs/WebViewChromiumPrefs.xml
              • Size 127B
              • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
              • MD5 SHA1 SHA512