General

  • Target
    2c522f3527def8ac97958cd2c89a7c29
  • Size 275KB
  • Sample220627-nc8graagcp
  • SHA256 889392ed44a613bb3618f6b9a05a663f801c9cd7086ff8d3d7531c3bc57d97be
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • anubis

C2
  • http://update-apk.net

Targets

    • Target
      2c522f3527def8ac97958cd2c89a7c29
    • Size 275KB
    • SHA256 889392ed44a613bb3618f6b9a05a663f801c9cd7086ff8d3d7531c3bc57d97be
    • MD5 SHA1 SHA512
    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks