Analysis
-
max time kernel
672451s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
03-06-2022 05:34
Static task
static1
Behavioral task
behavioral1
Sample
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
7711F2515FA68FCB75459A90B9D0102569435CDFBAACB35B23828AB17D6A0987.apk
-
Size
3.7MB
-
MD5
b7b6ae08971e111291e2dffe48667c42
-
SHA1
ffd2c09b20809ba853bfa0776ae59447ea82d4b7
-
SHA256
7711f2515fa68fcb75459a90b9d0102569435cdfbaacb35b23828ab17d6a0987
-
SHA512
0414838b61f594a12cbab985439ab97194b75117562e2a091c0cbab6c029930a36a2b9b0a3781c4972abf6c39f5d4f6aada2588280eedbc7b3d506a566eee7ae
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.rsksbgdkgcae.fvogspmykjv/app_files/vdtfcg.jar 6298 com.rsksbgdkgcae.fvogspmykjv -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.rsksbgdkgcae.fvogspmykjv
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
217KB
MD555bcef86e2869e2c9c57c989ca33303c
SHA1e23d9f47130be7c913eec65dffe494451a8435be
SHA256ab54eedea2830d13e96e761c5af98c8d4a11ea98c78c9475f57a801aa2b8aa3c
SHA512824f4b03b443f612089eaa7560d93c710b26ee51c974098c8ce674c82da4b7cd336723388de7fd143f2e212857e01c3a8647643ed6addb0b84dc026a97493c4d
-
Filesize
440KB
MD53389ca8da78d92d27bbc4348bc44d8f9
SHA18bc6c2bf025e7c72af926df48ec58250dc90c0e1
SHA256e195e706b0493c04cb30e9e76ee93e9fe749565d8edde91ea1e9f569e7117ead
SHA5123f98236c458d45e2113ae8f7e1eec28efd400edcb6a2c860dde355ef11fb0d2bb9b06c72f54a2b92432bb13317f992b8ad7fc58c30099de54f6c63b1854c7f03