anubis | 57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad | Triage

Analysis

max time kernel
672860s
max time network
155s
platform
android_x64
resource
android-x64-20220310-en
submitted
03-06-2022 05:35

Sharing

Report Analysis Logs

General

Target

57C9563A1E3ADC9737EAE84B6FB3F45AA98621AB4D1BCED43EEEF5E35FEE9AAD.apk
Size

285KB
MD5

9a203d62480bceb0116dc1b32b2e20d2
SHA1

ef237eccaceaf6dbc05af9c24c80d43d4bc89e15
SHA256

57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad
SHA512

bf3f35f03ad2188d71841df743c672770aebd67ef9362fcf1cb9378c6bdfa9d649afce14337af6d7d5eeec341014ccf67ce97faffb2340d565ddb0d09af3d153

Score

10^/10

anubis banker evasion infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

wocwvy.czyxoxmbauu.slsa

description ioc process

Framework API call android.hardware.SensorManager.registerListener wocwvy.czyxoxmbauu.slsa

wocwvy.czyxoxmbauu.slsa
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:6266

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...