General

  • Target

    7d9b13940cdff29ffc9dcf2e2e6f67cec204e99815ee00e4f7dd87a5ab4ba33a

  • Size

    3.1MB

  • Sample

    220521-nkcp2sghgk

  • MD5

    2ecd1f5dd7fdc0cc7045761bc4d1949f

  • SHA1

    014dcbe68b3e4003f0f742d54f3275d35ddb866a

  • SHA256

    7d9b13940cdff29ffc9dcf2e2e6f67cec204e99815ee00e4f7dd87a5ab4ba33a

  • SHA512

    6d51fdf01bf4becb7cec3c7891d78f4924fe4874268b08f68204f7e003f1d139760be76a6bbb74c484ed4ee7dc5dd1fc9cfc5238ac5aa095cd4fc1ce57587db6

Malware Config

Targets

    • Target

      7d9b13940cdff29ffc9dcf2e2e6f67cec204e99815ee00e4f7dd87a5ab4ba33a

    • Size

      3.1MB

    • MD5

      2ecd1f5dd7fdc0cc7045761bc4d1949f

    • SHA1

      014dcbe68b3e4003f0f742d54f3275d35ddb866a

    • SHA256

      7d9b13940cdff29ffc9dcf2e2e6f67cec204e99815ee00e4f7dd87a5ab4ba33a

    • SHA512

      6d51fdf01bf4becb7cec3c7891d78f4924fe4874268b08f68204f7e003f1d139760be76a6bbb74c484ed4ee7dc5dd1fc9cfc5238ac5aa095cd4fc1ce57587db6

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks