Analysis
- max time kernel
2740026s - max time network
159s - platform
android_x64 - resource
android-x64-20220310-en - submitted
08/05/2022, 07:57
Static task
static1
Behavioral task
behavioral1
Sample
56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a.apk
- Size 4.4MB
- Sample220508-jtl8macae2
- SHA256 56e6b01e379e61166f8fdd31725c945a26fc64f2e74c6df2e8cb9ce57d6c531a
- MD5 01c4e30b8e99842a2e48c7494819bfd0
- SHA1 3c587f230dce5e3afb2c920412b7f5cc7ba33220
- SHA512 381ab4d3e27a52fd7dab39937aa771cc6ad10793cbaa7ec4eb45e5248be596cdb0ab60208c22a2b0860aa84527a003cac0788421861ea4675afb72fe24e89faa
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Anubis banker
Android banker that uses overlays.
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json 6302 tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json 6302 tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg - Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json
- Size 2.0MB
- SHA256 3bd8d3655c5f5172220b5c46288c6143736388a8aa74f1a312bfe74b7ff4a121
- MD5 7d44771e6487ad026f61b21e604fff03
- SHA1 1a235a813a04a0175d4a8b6f48f1e6452ab644f6
- SHA512 97c26745a56f686022ab4628fa7f57ba431eba58359c082533e078d4f7f92848771816e6e84d2d7db23628ab4a7d1c18aae6128562883e1705da369d16070a9e
- SSDEEP 49152:sIjV/J4mj7ZFsh1LNM99vAMKy5HA2G5fgzg/KjR8Z+FynrZgdem80:FVx4G7LvHANyef5fTKjLCrZgdB80
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json
- Size 2.0MB
- SHA256 ea025f95f10ecf7bc8c586ab5a5673c5710e5b5f34929842258c891f0a5e13d4
- MD5 3bfbd1f2cedd151314e6fe62b1056f1f
- SHA1 c538e539ba3a255fbae0156626753b4605ee975b
- SHA512 6f87222edcffac7e7b4140032ab1cc4d013f2cad7ea560e7ed225da3aa79b48517d533f01823887bf27edca0ff98f9810e59ab94c57cafa63029e0d98fa6ec7e
- SSDEEP 24576:rYetPM6twsbYymgtgTyvv7XcEZNlb9aIo5XjzC/0VQpV+jyU:rj2entg8HLaP5XjzCA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_DynamicOptDex/qj.json
- Size 2.0MB
- SHA256 ea025f95f10ecf7bc8c586ab5a5673c5710e5b5f34929842258c891f0a5e13d4
- MD5 3bfbd1f2cedd151314e6fe62b1056f1f
- SHA1 c538e539ba3a255fbae0156626753b4605ee975b
- SHA512 6f87222edcffac7e7b4140032ab1cc4d013f2cad7ea560e7ed225da3aa79b48517d533f01823887bf27edca0ff98f9810e59ab94c57cafa63029e0d98fa6ec7e
- SSDEEP 24576:rYetPM6twsbYymgtgTyvv7XcEZNlb9aIo5XjzC/0VQpV+jyU:rj2entg8HLaP5XjzCA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 d5d0c90eb6a175f93e32939b9159d9b6f1f1370b7a2ed98a412950ca637ebd08
- MD5 61189bac11fbec8997a6a0249dbfe029
- SHA1 c142f777b74c096040e6739419864d3e85fcfb1e
- SHA512 3bc5730dc82c36a0a1a09c2ea83064860d9c17393d996ff9d1826248e1e24d1d5e2e6aa275675194e32679fdfdd2e38720d4326d0b5677b2ee1e703a87eb2d31
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/Web Data
- Size 112KB
- SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
- MD5 b663831f8cc130493476d94f2d7a5330
- SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
- SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
- SSDEEP 96:ozaBdUDN1uKdlXfnaBdUDN1uKdlXf/eWbT6QfBE/g7rLH4y/5AIpEgeWbT6QfBEJ:owQfMQfHbTTNbTTa2Tgv2Tgz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/Web Data-journal
- Size 1KB
- SHA256 2b56e2b5b98e2ec7540f6294db4ad64145ef04691e7e97227a2ad8ad818989a0
- MD5 a938182ce5851d6b1beda07f7ac7a205
- SHA1 7c1f22e7c8e83f8758438b6d1f87ea4b91ad2f70
- SHA512 fff323367a8147d10815b40d97f1ba6d338ea59ee5b4f8597a0e4370329a8d9ae751ce59eb3d74b8994f035558ffd73416a37fa8832508f264cfc3e3da2d452d
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/app_webview/metrics_guid
- Size 36B
- SHA256 641e585cf39a94b1f5b0cbdce797337edbd96179740b3ad1fb0cdfae8189a37e
- MD5 41ed8abe71f93185726336c72bcdfb64
- SHA1 7df21ab371fc1624b22627598581d78b3830c8e4
- SHA512 0ca5f83d8e1f99cd7bca9c262492490a76349a771eacf645ebe431b85ebe1340fea78da53b6452e226b179deee55234ffb1190bba24c20a064961f8a94838cc4
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 99ceb6c9b1a59b93cd9bc518c3549379680959c52447558c04a77c91035754b9
- MD5 2048cc819ceafc6f857481eb2077be89
- SHA1 f629d00c53993b6e53b8f81634921346226045a7
- SHA512 8a8c395431196d191eeedc6d5ac75f7a830bd40b4b88721fb44abc6b720298d0fa07cf554c92861fd16f876961ce5c858a6276556c5123cbdf1e6c0ecaf3a21f
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/cache/org.chromium.android_webview/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 1b219fda6aeb3254ce6a1e0ae4ca7cd6fd310637b8ffaf8ba11f83c697ca0246
- MD5 a4cbe4b7d1fe2dd30e6b1d3ca6dc7cac
- SHA1 3b5e0c52b87e2528b4fd16534abe11c2410ed1bc
- SHA512 cc15d6c2c991c07dd77ae75c558a89ca6b2d36c6fe442a438c3f448c19867e2d694ad1f7b75a3f855aa6bca4d7e8a02d35b243fb47f5fdf865101bcb092ee03b
- MD5 SHA1 SHA512
- Path /data/user/0/tjksgglgsphzpssachnjqftu.szbsqybbxwdsxlahsctys.tmmfuzcg/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
- MD5 6ef709b8536878951e87c29a1518fc2b
- SHA1 24376c70b00152501b3d98df61fa7db435339172
- SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
- MD5 SHA1 SHA512