General

  • Target

    EAE0BC48D1EAB1530C21E3FC973342809CA183910F83C0BA4926B2A7FE08861B.apk

  • Size

    284KB

  • Sample

    220602-nfb8qabbam

  • MD5

    8fb251fbf31d4acb21fec896770fc7b1

  • SHA1

    af32e0057bb34ebcde00e0a1993c6fb8e5e81163

  • SHA256

    eae0bc48d1eab1530c21e3fc973342809ca183910f83c0ba4926b2a7fe08861b

  • SHA512

    6d869d2378373642d9084f765e0cd44861bdc8f03e8c29a06fc71bc665a01e96f834fb123eeb9c480b71633c5a8dc32435ce6014a2c4ed2adf6ebc43fcd8886e

Malware Config

Extracted

Family

anubis

C2

http://176.121.14.158/

Targets

    • Target

      EAE0BC48D1EAB1530C21E3FC973342809CA183910F83C0BA4926B2A7FE08861B.apk

    • Size

      284KB

    • MD5

      8fb251fbf31d4acb21fec896770fc7b1

    • SHA1

      af32e0057bb34ebcde00e0a1993c6fb8e5e81163

    • SHA256

      eae0bc48d1eab1530c21e3fc973342809ca183910f83c0ba4926b2a7fe08861b

    • SHA512

      6d869d2378373642d9084f765e0cd44861bdc8f03e8c29a06fc71bc665a01e96f834fb123eeb9c480b71633c5a8dc32435ce6014a2c4ed2adf6ebc43fcd8886e

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks