Overview

overview

10

Static

static

7

3ddb43b421...4e.apk

android_x86

10

3ddb43b421...4e.apk

android_x64

10

3ddb43b421...4e.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ddb43b421adc9d90502d39ce68a76a3ed9addcc7866f270deb3d8effefa9e4e

  • Size

    2.9MB

  • Sample

    220625-bw1j2abcg9

  • MD5

    ac78fe3a2934efdfda73727906502f6a

  • SHA1

    ce34fa87b1020f5706b460453922e719b155184f

  • SHA256

    3ddb43b421adc9d90502d39ce68a76a3ed9addcc7866f270deb3d8effefa9e4e

  • SHA512

    a21633fef057a9c03ced6a941d10bc622cb14ce6e51069087a36a8dcf495d369bdbb431ba6b31cb37b957492ed7199075ff666228f322b9dd0a8827aa35f361e

Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

anubis

C2

http://xyz5xyz.ru

Targets

    • Target

      3ddb43b421adc9d90502d39ce68a76a3ed9addcc7866f270deb3d8effefa9e4e

    • Size

      2.9MB

    • MD5

      ac78fe3a2934efdfda73727906502f6a

    • SHA1

      ce34fa87b1020f5706b460453922e719b155184f

    • SHA256

      3ddb43b421adc9d90502d39ce68a76a3ed9addcc7866f270deb3d8effefa9e4e

    • SHA512

      a21633fef057a9c03ced6a941d10bc622cb14ce6e51069087a36a8dcf495d369bdbb431ba6b31cb37b957492ed7199075ff666228f322b9dd0a8827aa35f361e

    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks