anubis | 090b5fb792b62225df6ca55fac2d96b630d596a61b7071009e0084056d04240a | Triage

Analysis

max time kernel
2761456s
max time network
168s
platform
android_x64
resource
android-x64-20220621-en
submitted
27-06-2022 09:55

Sharing

Report Analysis Logs

General

Target

66b3529f7589cac62960bfacc9dbc5f4.apk
Size

365KB
MD5

66b3529f7589cac62960bfacc9dbc5f4
SHA1

9d00da887ed34e6ea42a19419ef5ab0f58d36fe2
SHA256

090b5fb792b62225df6ca55fac2d96b630d596a61b7071009e0084056d04240a
SHA512

80e250ebf05e4f569b6d3a709b12574bfd64bd58e81bb07d434c6a83a47fb149986b23335122ba6e70a569faa87f5de2c14d54662698ac43793dad7e86f74a5f

Score

10^/10

anubis banker evasion infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

anubis.bot.myapplication

description ioc process

Framework API call android.hardware.SensorManager.registerListener anubis.bot.myapplication

anubis.bot.myapplication
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:5874

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...