anubis | 9c7b234d0d46169dcefb9f5b22c5df134b1a120b67666c071feaf97a6078d1a1

Resubmissions

27-06-2022 10:36

220627-mnd7lsaebl 10

Analysis

max time kernel
2763792s
max time network
57s
platform
android_x64
resource
android-x64-20220621-en
submitted
27-06-2022 10:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8ae20794d2fc7659a003d5debd6970d8-1.apk
Size

1.9MB
MD5

8ae20794d2fc7659a003d5debd6970d8
SHA1

7aadc3e33871db0111a32c5b0bf68ec8db7860e5
SHA256

9c7b234d0d46169dcefb9f5b22c5df134b1a120b67666c071feaf97a6078d1a1
SHA512

30f1bbb28cfc2ad105e2f86302f124fa60c0fd382f245b0be829710e9fdd29d347ae8063431158445f4877b3c4062c4d664e87779f1eae50d1cc2bb37fcc646d

Score

10^/10

anubis banker infostealer trojan

Malware Config

Extracted

Family

anubis

http://old.mandamientos.ga

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

Processes:

gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw

ioc	pid	process
/data/user/0/gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw/app_DynamicOptDex/Pa.json	5330	gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw
/data/user/0/gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw/app_DynamicOptDex/Pa.json	5330	gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw

gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw
1⤵
- Loads dropped Dex/Jar
PID:5330

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw/app_DynamicOptDex/Pa.json
Filesize
1.0MB

MD5
cb9df5c68e588e64aec0dc13fff5d918

SHA1
db665796ff8b5d029bb661caf0118f5f3cb143aa

SHA256
d073367064a20c35f08a59adcefd7bb017e567a36b26913ce22e8f2acfd1f8fb

SHA512
7007874302d06c01e086e50105f941cd6b14e7916aae6071746026908ba9e486e97f51bd96279d633f7c181623600fcdff9f0efd49531b86ff0fcde225079280

Download Submit
/data/user/0/gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw/app_DynamicOptDex/Pa.json
Filesize
1.0MB

MD5
8b4f731ed2aa6bfe3042e1183e83c60e

SHA1
a90dca5eac7130025abb00a666ca190590776c30

SHA256
8306aed35abe6dd4105d060a4ccb1afcb87cc97cb2444c03ebf320810706089e

SHA512
12db81a65b170ef03f07d9cc441f06dced2776ca0a57cc3205fcdb934814a48bd8670eabd8352ad5f27277a620fc4bae6e36986c5f9c03a346e1051ad74b58bb

Download Submit
/data/user/0/gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw/app_DynamicOptDex/Pa.json
Filesize
1.0MB

MD5
8b4f731ed2aa6bfe3042e1183e83c60e

SHA1
a90dca5eac7130025abb00a666ca190590776c30

SHA256
8306aed35abe6dd4105d060a4ccb1afcb87cc97cb2444c03ebf320810706089e

SHA512
12db81a65b170ef03f07d9cc441f06dced2776ca0a57cc3205fcdb934814a48bd8670eabd8352ad5f27277a620fc4bae6e36986c5f9c03a346e1051ad74b58bb

Download Submit
/data/user/0/gohcthplmgmyrcnhcgsxtysyue.rqjgllnxahaafqsyplz.lcoguawmyxbdzriqeiczstw/app_DynamicOptDex/oat/Pa.json.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit