Analysis
-
max time kernel
3866342s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21-05-2022 11:26
Static task
static1
Behavioral task
behavioral1
Sample
d200a8f5cb0e3c2ee77fa377d9ae4e1cc3e22724e63a12e2f57a0e68706a9117.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
d200a8f5cb0e3c2ee77fa377d9ae4e1cc3e22724e63a12e2f57a0e68706a9117.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
d200a8f5cb0e3c2ee77fa377d9ae4e1cc3e22724e63a12e2f57a0e68706a9117.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
d200a8f5cb0e3c2ee77fa377d9ae4e1cc3e22724e63a12e2f57a0e68706a9117.apk
-
Size
3.2MB
-
MD5
fe9ac42006387566fb526a4246cc27f2
-
SHA1
17e808d812f98d3db0271ec6ea3c4f9d4c9f8ee8
-
SHA256
d200a8f5cb0e3c2ee77fa377d9ae4e1cc3e22724e63a12e2f57a0e68706a9117
-
SHA512
eb892f34545ea7053f3349b21fc663fab7711f7ec4b3255c87e1a9ab647951e8bc3a592611bb4028034c8307110e724c686c748ff9669165d91a784c0e5f37b2
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwyioc pid process /data/user/0/ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwy/app_DynamicOptDex/cwJYWLi.json 6278 ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwy /data/user/0/ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwy/app_DynamicOptDex/cwJYWLi.json 6278 ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwy -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes:
ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwydescription ioc process Framework API call android.hardware.SensorManager.registerListener ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwy
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
MD5ea363b49d439300b95390f0e3665d521
SHA12d7508e0bf2002ecf45a91b0521e621d21e15584
SHA2563b4de58fe446f1ae22d9ca82e8dc6f6afa2c95f3c589ce45a1aa773c6b03a802
SHA51281d9bb2334fafb7407e80d04c4a20f2cf2dce4586827fa989123f080ba753da9abb31ef4a793f3461cbb964c275124e13c97660ec15fa88582d6cbf496b14751
-
Filesize
2.0MB
MD5aa5fae224e87a4615692789d55422d1b
SHA15311ee3550081ff69426d5f718f60fca6e1eebcc
SHA25656ff77f495aaaf617eb2f0c2aae93e9bd763bac1a07aa1b3faefcbd1a6254f03
SHA512d17abe2328892a6838f9fe10724f78913ee1784c8d60aa1856cb8872f5f193fa686582fed8d258c9f9dbb103b00af76ddecb172e806cc2fd632a421b08a61916
-
Filesize
2.0MB
MD5aa5fae224e87a4615692789d55422d1b
SHA15311ee3550081ff69426d5f718f60fca6e1eebcc
SHA25656ff77f495aaaf617eb2f0c2aae93e9bd763bac1a07aa1b3faefcbd1a6254f03
SHA512d17abe2328892a6838f9fe10724f78913ee1784c8d60aa1856cb8872f5f193fa686582fed8d258c9f9dbb103b00af76ddecb172e806cc2fd632a421b08a61916
-
/data/user/0/ghrttzazwtj.abgszgeuqsetgmcqmrfffzcgg.kyfxgutepuwy/app_DynamicOptDex/oat/cwJYWLi.json.cur.prof
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e