Analysis

  • max time kernel
    3745663s
  • max time network
    83s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    08-07-2022 15:52

General

  • Target

    e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3.apk

  • Size

    572KB

  • MD5

    537962979fdff73aa15da55f15f64c41

  • SHA1

    054ecd61b21270401a55cc22b9d99d9db8d9c36c

  • SHA256

    e11c929b5008f63bf8c445ed6c78c0409f09967d60976f0f811babc6f9e18fa3

  • SHA512

    4922de9be992df9842dae55e1b3fee4fff8b57c694a98640a41a230969ba87b7e337c4e0e414c9646eace477f8005974104d6f6cb8c09f07a801e384626ab595

Malware Config

Signatures

  • Anubis banker

    Android banker that uses overlays.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.iefmjtltw.fgenezq
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:5852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.iefmjtltw.fgenezq/app_files/oat/tpfeigvdlbo.jar.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.iefmjtltw.fgenezq/app_files/tpfeigvdlbo.jar
    Filesize

    185KB

    MD5

    64595545aa6a3437d6c37bb3298a948f

    SHA1

    136fe0c73841f36f45151eb98e1d212ff4411188

    SHA256

    3b21316b1bd9d28946390dc6a5c7acabb1fc6b1fc862f707ff65983acf3bc03f

    SHA512

    cf951b9b7ee347d5c2abf0b49e73e7d99bca96017c63ea8670a98bcc025ba015e8d31b060fca9539484f69e65619819ac8c999ba76d35f44d5d432737c107f3d

  • /data/user/0/com.iefmjtltw.fgenezq/app_files/tpfeigvdlbo.jar
    Filesize

    370KB

    MD5

    5422c9298eef1962abd0cc92beb2efe3

    SHA1

    80be9020200469905de57e027d7339d9af981c19

    SHA256

    1d0a4e1644941b38376651b09b5b0ec07394b73e7c1d0b1f75e6586f20b5df04

    SHA512

    68ae79c34091e161ddbd2f3f1d7ee0cf47e750ad0eadf5eed30477edac0123e332d8689e4679ff12bc76667c000a5f6333fe8f08ef1535f99ebf029700f71c7d