General

  • Target

    78913b80d9970c43fda8f1c6e63888efd67707eab80ed3ae822d118de8c33f03.apk

  • Size

    194KB

  • Sample

    220605-p8t5nsegfq

  • MD5

    c148c63c974e2312d8f847d07242a86b

  • SHA1

    377f86abc4946fe9fe3506f421bc51ef9c9d9bad

  • SHA256

    78913b80d9970c43fda8f1c6e63888efd67707eab80ed3ae822d118de8c33f03

  • SHA512

    b963ac22ba477b0cfda399bd19cfb801c2f8545788c6c01aefe49900f030beb14f2f9a5a382b6ff43df2d5256a710a5812d99b2c7a2a83d7cac5ddf840d60ba0

Malware Config

Extracted

Family

anubis

C2

http://80.211.64.186/

Targets

    • Target

      78913b80d9970c43fda8f1c6e63888efd67707eab80ed3ae822d118de8c33f03.apk

    • Size

      194KB

    • MD5

      c148c63c974e2312d8f847d07242a86b

    • SHA1

      377f86abc4946fe9fe3506f421bc51ef9c9d9bad

    • SHA256

      78913b80d9970c43fda8f1c6e63888efd67707eab80ed3ae822d118de8c33f03

    • SHA512

      b963ac22ba477b0cfda399bd19cfb801c2f8545788c6c01aefe49900f030beb14f2f9a5a382b6ff43df2d5256a710a5812d99b2c7a2a83d7cac5ddf840d60ba0

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks