General

  • Target

    5ad5e92ba2421c0b111a25383d859604bd9abb8468907b185bdbfd4b0661a173

  • Size

    3.2MB

  • Sample

    220521-nk4hrsdgh5

  • MD5

    6f63145b71dccc2711e6baf40899f274

  • SHA1

    a1b8f8b2fda17fce23dcdd1c6222b91dc772417c

  • SHA256

    5ad5e92ba2421c0b111a25383d859604bd9abb8468907b185bdbfd4b0661a173

  • SHA512

    1789ea12b9263278fbc648d229a59a04112e727f9c25a240b320476af06d9a29814bee8a1b265d7a6a998ce4dc77a45bde1238979d0c092485f12d94b8207f4a

Malware Config

Targets

    • Target

      5ad5e92ba2421c0b111a25383d859604bd9abb8468907b185bdbfd4b0661a173

    • Size

      3.2MB

    • MD5

      6f63145b71dccc2711e6baf40899f274

    • SHA1

      a1b8f8b2fda17fce23dcdd1c6222b91dc772417c

    • SHA256

      5ad5e92ba2421c0b111a25383d859604bd9abb8468907b185bdbfd4b0661a173

    • SHA512

      1789ea12b9263278fbc648d229a59a04112e727f9c25a240b320476af06d9a29814bee8a1b265d7a6a998ce4dc77a45bde1238979d0c092485f12d94b8207f4a

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks