General

  • Target

    71185b1968be0083bd5e3b046ff49ec3a2ce3d1a013f930c98d0f8d17a7c05ca

  • Size

    3.2MB

  • Sample

    220521-nkrh7sdgg8

  • MD5

    8f9dfaf14a48fd6676cf3bb521154c0e

  • SHA1

    6ae9c920917618c90e970f7099750e120ac507c1

  • SHA256

    71185b1968be0083bd5e3b046ff49ec3a2ce3d1a013f930c98d0f8d17a7c05ca

  • SHA512

    6edd71efdfbbd3f14b4128781b4426f5bbcb5d630603106aec924455a0c776e7492123ed8cd63a82fd5b07699b137a7b9e1ae6b3b4dda5a967f52d2489f44abd

Malware Config

Targets

    • Target

      71185b1968be0083bd5e3b046ff49ec3a2ce3d1a013f930c98d0f8d17a7c05ca

    • Size

      3.2MB

    • MD5

      8f9dfaf14a48fd6676cf3bb521154c0e

    • SHA1

      6ae9c920917618c90e970f7099750e120ac507c1

    • SHA256

      71185b1968be0083bd5e3b046ff49ec3a2ce3d1a013f930c98d0f8d17a7c05ca

    • SHA512

      6edd71efdfbbd3f14b4128781b4426f5bbcb5d630603106aec924455a0c776e7492123ed8cd63a82fd5b07699b137a7b9e1ae6b3b4dda5a967f52d2489f44abd

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks