General

  • Target

    86c8a6b7589dee4accf3561f75ab61e0414c68a3fbc9b5d827bfd8d297007e15

  • Size

    2.7MB

  • Sample

    220520-3lnw2acacr

  • MD5

    1007c2561c3bef9d7ec27365e550dff5

  • SHA1

    01354f7af002d4aa22106d378b838a0e3d51e47f

  • SHA256

    86c8a6b7589dee4accf3561f75ab61e0414c68a3fbc9b5d827bfd8d297007e15

  • SHA512

    a9120d6354b7831bed18e9c028fedf916964e1c21a7d939eec6400645ae8ba7cd16a3553f8984351873236319fcc7b803f152aa16f1f97a2ae517c561d4db98a

Malware Config

Targets

    • Target

      86c8a6b7589dee4accf3561f75ab61e0414c68a3fbc9b5d827bfd8d297007e15

    • Size

      2.7MB

    • MD5

      1007c2561c3bef9d7ec27365e550dff5

    • SHA1

      01354f7af002d4aa22106d378b838a0e3d51e47f

    • SHA256

      86c8a6b7589dee4accf3561f75ab61e0414c68a3fbc9b5d827bfd8d297007e15

    • SHA512

      a9120d6354b7831bed18e9c028fedf916964e1c21a7d939eec6400645ae8ba7cd16a3553f8984351873236319fcc7b803f152aa16f1f97a2ae517c561d4db98a

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks