Overview

overview

10

Static

static

7

814001A82C...86.apk

android_x86

10

814001A82C...86.apk

android_x64

10

814001A82C...86.apk

android_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    814001A82CC709413BA6D301AD65BD32052E4AA493313117E50CFCB419E3D086.apk
  • Size 2.5MB
  • Sample220602-ke7rfsaahn
  • SHA256 814001a82cc709413ba6d301ad65bd32052e4aa493313117e50cfcb419e3d086
  • MD5 SHA1 SHA512
Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

  • anubis

C2

  • https://martilerrentcarskirolrte.com/

Targets

    • Target
      814001A82CC709413BA6D301AD65BD32052E4AA493313117E50CFCB419E3D086.apk
    • Size 2.5MB
    • SHA256 814001a82cc709413ba6d301ad65bd32052e4aa493313117e50cfcb419e3d086
    • MD5 SHA1 SHA512
    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks