Analysis
- max time kernel
2762571s - max time network
112s - platform
android_x86 - resource
android-x86-arm-20220621-en - submitted
27/06/2022, 10:11
General
- Target 2C522F3527DEF8AC97958CD2C89A7C29.apk
- Size 275KB
- Sample220627-l8bfsacca6
- SHA256 889392ed44a613bb3618f6b9a05a663f801c9cd7086ff8d3d7531c3bc57d97be
Score
10/10
Malware Config
Signatures
- Anubis banker
Android banker that uses overlays.
- Makes use of the framework's Accessibility service. 2 IoCs
- Acquires the wake lock. 1 IoCs
- Requests enabling of the accessibility settings. 1 IoCs
- Reads information about phone network operator.
- Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
- Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes
-
wocwvy.czyxoxmbauu.slsa1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation).