Overview

overview

10

Static

static

7

87907DBA01...4B.apk

android_x86

10

87907DBA01...4B.apk

android_x64

10

87907DBA01...4B.apk

android_x64

10

Analysis

  • max time kernel
    597094s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    02/06/2022, 08:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    87907DBA0127EB3DA29BFB5DA08C83AB94FBD17EA6CE23905C7EEBCC88CF264B.apk
  • Size 2.6MB
  • Sample220602-kfbqeaabaj
  • SHA256 87907dba0127eb3da29bfb5da08c83ab94fbd17ea6ce23905c7eebcc88cf264b
  • MD5 SHA1 SHA512
Score
10/10
anubisbankerevasioninfostealertrojan

Malware Config

Extracted

Family

  • anubis

C2

  • http://outletups.xyz/

Signatures

  • Anubis banker

    Android banker that uses overlays.

    bankertrojaninfostealeranubis
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
    evasion

Processes

  • zhokdmeybawawqtzkoueird.swpizjxfeuapss.cguswrbwqq
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:6159

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        JJQHF.json
        • Path /data/user/0/zhokdmeybawawqtzkoueird.swpizjxfeuapss.cguswrbwqq/app_DynamicOptDex/JJQHF.json
        • Size 1.1MB
        • SHA256 ae3ca73ef316984c1815270f71b6e53f8781ef7465658b691bd5142a175a70af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        JJQHF.json
        • Path /data/user/0/zhokdmeybawawqtzkoueird.swpizjxfeuapss.cguswrbwqq/app_DynamicOptDex/JJQHF.json
        • Size 1.1MB
        • SHA256 fdb40a0bd587ac36d027b7c932045b9f8aeae91a4ace5826d46a069af19b073f
        • MD5 SHA1 SHA512 SSDEEP
        Download

        JJQHF.json
        • Path /data/user/0/zhokdmeybawawqtzkoueird.swpizjxfeuapss.cguswrbwqq/app_DynamicOptDex/JJQHF.json
        • Size 1.1MB
        • SHA256 fdb40a0bd587ac36d027b7c932045b9f8aeae91a4ace5826d46a069af19b073f
        • MD5 SHA1 SHA512 SSDEEP
        Download