General

  • Target

    10ad5b1a36508bd9f8da5920f269c0e9272678c0664cff36e32f7e1e84a124c8

  • Size

    3.2MB

  • Sample

    220521-nlqy3adha6

  • MD5

    bfe2ae5e8f8f17662377c26efa28ea2a

  • SHA1

    8be8101f9137162b25fdf38a64c27c7ed5c6b387

  • SHA256

    10ad5b1a36508bd9f8da5920f269c0e9272678c0664cff36e32f7e1e84a124c8

  • SHA512

    8a4e3cb99c2b92633f97d99b648abdab28d4f747b82e88ec96cb03e405367f517b16f34655cdf9785affa75af34235ba5f60a6b7ff0ac369f019430631ad5eba

Malware Config

Targets

    • Target

      10ad5b1a36508bd9f8da5920f269c0e9272678c0664cff36e32f7e1e84a124c8

    • Size

      3.2MB

    • MD5

      bfe2ae5e8f8f17662377c26efa28ea2a

    • SHA1

      8be8101f9137162b25fdf38a64c27c7ed5c6b387

    • SHA256

      10ad5b1a36508bd9f8da5920f269c0e9272678c0664cff36e32f7e1e84a124c8

    • SHA512

      8a4e3cb99c2b92633f97d99b648abdab28d4f747b82e88ec96cb03e405367f517b16f34655cdf9785affa75af34235ba5f60a6b7ff0ac369f019430631ad5eba

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks