General

  • Target

    05ab401f23f1f4720d3e857a0f63f644e84876e43db097fe0ca4fd2f4b9088aa

  • Size

    3.2MB

  • Sample

    220521-nlzwzahabn

  • MD5

    26755cfdbba7b5140cb10ffe71e1c6f0

  • SHA1

    d2f6c8a94a480105f21d60276139f8d16f83abda

  • SHA256

    05ab401f23f1f4720d3e857a0f63f644e84876e43db097fe0ca4fd2f4b9088aa

  • SHA512

    96facb527e9a7e4f3ef035769e120a8df9ddb112078ff6bce61498d300bccb610a8b0ba4dc4a76282f19eb77b780e4f5e82782f6e3d47eaea168ea1b82c9e6d6

Malware Config

Targets

    • Target

      05ab401f23f1f4720d3e857a0f63f644e84876e43db097fe0ca4fd2f4b9088aa

    • Size

      3.2MB

    • MD5

      26755cfdbba7b5140cb10ffe71e1c6f0

    • SHA1

      d2f6c8a94a480105f21d60276139f8d16f83abda

    • SHA256

      05ab401f23f1f4720d3e857a0f63f644e84876e43db097fe0ca4fd2f4b9088aa

    • SHA512

      96facb527e9a7e4f3ef035769e120a8df9ddb112078ff6bce61498d300bccb610a8b0ba4dc4a76282f19eb77b780e4f5e82782f6e3d47eaea168ea1b82c9e6d6

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks