Overview

overview

10

Static

static

7

b4bd65520d...fd.apk

android_x86

10

b4bd65520d...fd.apk

android_x64

10

b4bd65520d...fd.apk

android_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4bd65520d764bea63e2956f63cfe1e79109aa63efc39f3fd938e29df77cf0fd.apk

  • Size

    361KB

  • Sample

    220605-pzvd3sefel

  • MD5

    18a3c09ce58b3db05cf248730adb6bd0

  • SHA1

    b8df9c4fbc07539f5b25929b132d97c1416b6710

  • SHA256

    b4bd65520d764bea63e2956f63cfe1e79109aa63efc39f3fd938e29df77cf0fd

  • SHA512

    e883b9da7887e01f13a25eb7a3f8ca619cf1040f2b50f7790632cc58e09f833a4b76f77aa687bb1fded4ebbe8703f5106138c9acd2b21f57e76f44e84bd81ff6

Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

anubis

C2

https://qzwrxetcryvtubynumnuybtvrcewsdcfv.com

Targets

    • Target

      b4bd65520d764bea63e2956f63cfe1e79109aa63efc39f3fd938e29df77cf0fd.apk

    • Size

      361KB

    • MD5

      18a3c09ce58b3db05cf248730adb6bd0

    • SHA1

      b8df9c4fbc07539f5b25929b132d97c1416b6710

    • SHA256

      b4bd65520d764bea63e2956f63cfe1e79109aa63efc39f3fd938e29df77cf0fd

    • SHA512

      e883b9da7887e01f13a25eb7a3f8ca619cf1040f2b50f7790632cc58e09f833a4b76f77aa687bb1fded4ebbe8703f5106138c9acd2b21f57e76f44e84bd81ff6

    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks