Analysis
- max time kernel
597935s - max time network
172s - platform
android_x64 - resource
android-x64-20220310-en - submitted
02/06/2022, 08:56
Static task
static1
Behavioral task
behavioral1
Sample
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
- Size 3.7MB
- Sample220602-kv726aabgr
- SHA256 7711f2515fa68fcb75459a90b9d0102569435cdfbaacb35b23828ab17d6a0987
- MD5 b7b6ae08971e111291e2dffe48667c42
- SHA1 ffd2c09b20809ba853bfa0776ae59447ea82d4b7
- SHA512 0414838b61f594a12cbab985439ab97194b75117562e2a091c0cbab6c029930a36a2b9b0a3781c4972abf6c39f5d4f6aada2588280eedbc7b3d506a566eee7ae
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Anubis banker
Android banker that uses overlays.
- Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.rsksbgdkgcae.fvogspmykjv/app_files/vdtfcg.jar 6310 com.rsksbgdkgcae.fvogspmykjv - Reads information about phone network operator.
- Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.rsksbgdkgcae.fvogspmykjv
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.rsksbgdkgcae.fvogspmykjv/app_files/vdtfcg.jar
- Size 217KB
- SHA256 ab54eedea2830d13e96e761c5af98c8d4a11ea98c78c9475f57a801aa2b8aa3c
- MD5 55bcef86e2869e2c9c57c989ca33303c
- SHA1 e23d9f47130be7c913eec65dffe494451a8435be
- SHA512 824f4b03b443f612089eaa7560d93c710b26ee51c974098c8ce674c82da4b7cd336723388de7fd143f2e212857e01c3a8647643ed6addb0b84dc026a97493c4d
- SSDEEP 3072:eJHR4UfohOD20ARg/Qd+8cttxdDcB758vhxFmoJquzc+QsNQ4S:eJx4Ui/pRg/YWn+xolc+QN
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.rsksbgdkgcae.fvogspmykjv/app_files/vdtfcg.jar
- Size 440KB
- SHA256 e195e706b0493c04cb30e9e76ee93e9fe749565d8edde91ea1e9f569e7117ead
- MD5 3389ca8da78d92d27bbc4348bc44d8f9
- SHA1 8bc6c2bf025e7c72af926df48ec58250dc90c0e1
- SHA512 3f98236c458d45e2113ae8f7e1eec28efd400edcb6a2c860dde355ef11fb0d2bb9b06c72f54a2b92432bb13317f992b8ad7fc58c30099de54f6c63b1854c7f03
- SSDEEP 6144:5gm0MQlnGFg+6FTtvv3LXcEGK3jCKtvaLbLPU3R/HlYBNZ0BUb2niDF84E:+GzgRTtvv7XcE/vaLbLPUhNYxFbC4E
- MD5 SHA1 SHA512 SSDEEP