Overview

overview

10

Static

static

7

6c3db02a80...e0.apk

android_x86

10

6c3db02a80...e0.apk

android_x64

10

6c3db02a80...e0.apk

android_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c3db02a803784285fab9183347666c310fc3df2ceacbbdc627412886f0356e0

  • Size

    414KB

  • Sample

    220521-nmcg3ahadj

  • MD5

    b6aa4b6853c58e046812dab3293788a4

  • SHA1

    19f73716f6d1311818913e757f5ad7c85cd030fb

  • SHA256

    6c3db02a803784285fab9183347666c310fc3df2ceacbbdc627412886f0356e0

  • SHA512

    cbe4039a0736bb9afabb36b84e4f79ece33f607c31d19b0a74ce007239a78c4cceac0e1956e006a09aa2d731c74cf05e67cd7f697214a8f7be5f060f8b66054f

Score
10/10
anubisandroidbankerinfostealerransomwaretrojan

Malware Config

Targets

    • Target

      6c3db02a803784285fab9183347666c310fc3df2ceacbbdc627412886f0356e0

    • Size

      414KB

    • MD5

      b6aa4b6853c58e046812dab3293788a4

    • SHA1

      19f73716f6d1311818913e757f5ad7c85cd030fb

    • SHA256

      6c3db02a803784285fab9183347666c310fc3df2ceacbbdc627412886f0356e0

    • SHA512

      cbe4039a0736bb9afabb36b84e4f79ece33f607c31d19b0a74ce007239a78c4cceac0e1956e006a09aa2d731c74cf05e67cd7f697214a8f7be5f060f8b66054f

    Score
    10/10
    anubisbankerinfostealerransomwaretrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks