Analysis
-
max time kernel
3891500s -
max time network
172s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21-05-2022 18:44
General
-
Target
04def74bb308de8783bc281fbe85ae09a475953426c23dc4ea9a38891fc7d833.apk
-
Size
3.2MB
-
MD5
8dfdcf563d1dfac09b256d615c1f4a37
-
SHA1
c0622ff1f85b80f567c6f63e9e87dfb72c6c6e38
-
SHA256
04def74bb308de8783bc281fbe85ae09a475953426c23dc4ea9a38891fc7d833
-
SHA512
34f5d38707365050ef71f9324b72bc9e20750e71e2b846f837253e050861c8b980caca28cac9c17b9ef2eb74d8959aaef1ed5426f07ee34b36f5d262677295a6
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes
-
kba.rynjocxnskapj.ekmbyjxa1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.jsonFilesize
2.0MB
MD5ab57a0360265bb32dfda286c9736cf83
SHA13d976ef66fd91e8ed8ec05805c170e02ae2e7b82
SHA256608cb9f17ac9994039902deca4055c38a48cbef2694c745a4dafd8410994423e
SHA5120b6768aa49d83cb39cb8ca3b86f3b242d235fcaf7dbba9118fd7e53acad5a91d292d1cc09730c5a3c831534bd71d879955079cb560ca80ba684c250add30e1d3
-
/data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.jsonFilesize
2.0MB
MD5a782b4a0228e013cabf6c96c4ed27f14
SHA11645aa43094225fb3797cf28ed6eb0a4989aa6ae
SHA256c8cd8f03440f3b0eee26dc567add1c597eaac7514f4edeecf8370d05e1d26fb9
SHA5129f453f687e75286c5dd6adaf75fb02c0d7bf196a8ef122659b561bb54a1fc409a66e3b7089f1cd4b325a3f8970715690b851f464a69eb3187ef91b6e279c212d
-
/data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.jsonFilesize
2.0MB
MD5a782b4a0228e013cabf6c96c4ed27f14
SHA11645aa43094225fb3797cf28ed6eb0a4989aa6ae
SHA256c8cd8f03440f3b0eee26dc567add1c597eaac7514f4edeecf8370d05e1d26fb9
SHA5129f453f687e75286c5dd6adaf75fb02c0d7bf196a8ef122659b561bb54a1fc409a66e3b7089f1cd4b325a3f8970715690b851f464a69eb3187ef91b6e279c212d
-
/data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/oat/YJEGXDB.json.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e