Analysis

  • max time kernel
    3866266s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21/05/2022, 11:25

General

  • Target
    e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4.apk
  • Size 3.2MB
  • Sample220521-njgbvaghen
  • SHA256 e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Anubis banker

    Android banker that uses overlays.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • zcsbslkgerdndszjs.dcbpdsaprqqmwem.nnqhqoleyzwjkxexrwmcaq
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:6366

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        saap.json

        • Path /data/user/0/zcsbslkgerdndszjs.dcbpdsaprqqmwem.nnqhqoleyzwjkxexrwmcaq/app_DynamicOptDex/saap.json
        • Size 2.0MB
        • SHA256 d764934d814dd206cbc4f686b0dfc07a41574ded16a9e61d820b76fa94b2f475
        • MD5 SHA1 SHA512 SSDEEP

        saap.json

        • Path /data/user/0/zcsbslkgerdndszjs.dcbpdsaprqqmwem.nnqhqoleyzwjkxexrwmcaq/app_DynamicOptDex/saap.json
        • Size 2.0MB
        • SHA256 d1dd2605e4f6911d44c988d99ee46847cd55c705f56d11c250fba572c5ab56ba
        • MD5 SHA1 SHA512 SSDEEP

        saap.json

        • Path /data/user/0/zcsbslkgerdndszjs.dcbpdsaprqqmwem.nnqhqoleyzwjkxexrwmcaq/app_DynamicOptDex/saap.json
        • Size 2.0MB
        • SHA256 d1dd2605e4f6911d44c988d99ee46847cd55c705f56d11c250fba572c5ab56ba
        • MD5 SHA1 SHA512 SSDEEP