anubis | e70e7de7598710feaf2d732b045a76703f5ad140cb8b25878f8c06998ec619ff | Triage

Analysis

max time kernel
685037s
max time network
155s
platform
android_x64
resource
android-x64-20220310-en
submitted
03-06-2022 06:47

Sharing

Report Analysis Logs

General

Target

E70E7DE7598710FEAF2D732B045A76703F5AD140CB8B25878F8C06998EC619FF.apk
Size

309KB
MD5

267f80b3f58039fe308de5cf60354a02
SHA1

d0d6075e34b93cc66b5bcc0b39279707022ee2f3
SHA256

e70e7de7598710feaf2d732b045a76703f5ad140cb8b25878f8c06998ec619ff
SHA512

cd59d2ce4cdf2b1da2fa771f1cef7645c9f00b79f0a707c90b80d4aa14b8841cea990ef2f04fd1b96d6afce45ee7a3781f4dbcd9a748cc625433e0754f3aaf6a

Score

10^/10

anubis banker evasion infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

wocwvy.czyxoxmbauu.slsa

description ioc process

Framework API call android.hardware.SensorManager.registerListener wocwvy.czyxoxmbauu.slsa

wocwvy.czyxoxmbauu.slsa
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:6305

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...