Overview

overview

10

Static

static

10

c38c675a43...70.apk

android_x86

10

c38c675a43...70.apk

android_x64

10

c38c675a43...70.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk

  • Size

    561KB

  • Sample

    220627-lxzz1aacbn

  • MD5

    c027ec0f9855529877bc0d57453c5e86

  • SHA1

    7b5e31a41c9220330146d8a173b21512971c74a2

  • SHA256

    c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70

  • SHA512

    78c12d46dc15ce52cc1ccbedd8b1762f6a594b44e72c80974eec19dc575b07f0db994b568ec78ab51ccdbf02e93ba0dff9f3b1a5f59cb694bed454baf2ac97a4

Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

anubis

C2

http://cdnjs.su

Targets

    • Target

      c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk

    • Size

      561KB

    • MD5

      c027ec0f9855529877bc0d57453c5e86

    • SHA1

      7b5e31a41c9220330146d8a173b21512971c74a2

    • SHA256

      c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70

    • SHA512

      78c12d46dc15ce52cc1ccbedd8b1762f6a594b44e72c80974eec19dc575b07f0db994b568ec78ab51ccdbf02e93ba0dff9f3b1a5f59cb694bed454baf2ac97a4

    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks