Overview

overview

10

Static

static

10

D4CE3C98DF...4A.apk

android_x86

10

D4CE3C98DF...4A.apk

android_x64

10

D4CE3C98DF...4A.apk

android_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    D4CE3C98DF7A584282DF0BB8CE6F304BDA0C120F67AAFDC457CD468F2961424A.apk

  • Size

    437KB

  • Sample

    220603-hgvtkacbe5

  • MD5

    71694f4bf8367d6ddd7d0357d08edf8e

  • SHA1

    5b694ce70b648ba191862544f79c20532dab290d

  • SHA256

    d4ce3c98df7a584282df0bb8ce6f304bda0c120f67aafdc457cd468f2961424a

  • SHA512

    61d3dafa2ecae5cb9fddef7b3747e93cb6804dc4450cefcb7798c150898beefd3dcdb8b955cb4f18c12f245035edcdf41f461527debc860fa8adde8d33bc8eff

Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

anubis

C2

https://bykingpanel.xyz/

Targets

    • Target

      D4CE3C98DF7A584282DF0BB8CE6F304BDA0C120F67AAFDC457CD468F2961424A.apk

    • Size

      437KB

    • MD5

      71694f4bf8367d6ddd7d0357d08edf8e

    • SHA1

      5b694ce70b648ba191862544f79c20532dab290d

    • SHA256

      d4ce3c98df7a584282df0bb8ce6f304bda0c120f67aafdc457cd468f2961424a

    • SHA512

      61d3dafa2ecae5cb9fddef7b3747e93cb6804dc4450cefcb7798c150898beefd3dcdb8b955cb4f18c12f245035edcdf41f461527debc860fa8adde8d33bc8eff

    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks