Analysis
-
max time kernel
3745663s -
max time network
83s -
platform
android_x64 -
resource
android-x64-20220621-en -
submitted
08-07-2022 15:52
Static task
static1
Behavioral task
behavioral1
Sample
e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3.apk
-
Size
572KB
-
MD5
537962979fdff73aa15da55f15f64c41
-
SHA1
054ecd61b21270401a55cc22b9d99d9db8d9c36c
-
SHA256
e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3
-
SHA512
4922de9be992df9842dae55e1b3fee4fff8b57c694a98640a41a230969ba87b7e337c4e0e414c9646eace477f8005974104d6f6cb8c09f07a801e384626ab595
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.iefmjtltw.fgenezqioc pid process /data/user/0/com.iefmjtltw.fgenezq/app_files/tpfeigvdlbo.jar 5852 com.iefmjtltw.fgenezq -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes:
com.iefmjtltw.fgenezqdescription ioc process Framework API call android.hardware.SensorManager.registerListener com.iefmjtltw.fgenezq
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.iefmjtltw.fgenezq/app_files/oat/tpfeigvdlbo.jar.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.iefmjtltw.fgenezq/app_files/tpfeigvdlbo.jarFilesize
185KB
MD564595545aa6a3437d6c37bb3298a948f
SHA1136fe0c73841f36f45151eb98e1d212ff4411188
SHA2563b21316b1bd9d28946390dc6a5c7acabb1fc6b1fc862f707ff65983acf3bc03f
SHA512cf951b9b7ee347d5c2abf0b49e73e7d99bca96017c63ea8670a98bcc025ba015e8d31b060fca9539484f69e65619819ac8c999ba76d35f44d5d432737c107f3d
-
/data/user/0/com.iefmjtltw.fgenezq/app_files/tpfeigvdlbo.jarFilesize
370KB
MD55422c9298eef1962abd0cc92beb2efe3
SHA180be9020200469905de57e027d7339d9af981c19
SHA2561d0a4e1644941b38376651b09b5b0ec07394b73e7c1d0b1f75e6586f20b5df04
SHA51268ae79c34091e161ddbd2f3f1d7ee0cf47e750ad0eadf5eed30477edac0123e332d8689e4679ff12bc76667c000a5f6333fe8f08ef1535f99ebf029700f71c7d