General

  • Target
    5bb0e4469e0d98df5c0ab4c60360c88246a41f6c30e677954a5a2fe5eb2818b7
  • Size 207KB
  • Sample220708-vgf2mababr
  • SHA256 5bb0e4469e0d98df5c0ab4c60360c88246a41f6c30e677954a5a2fe5eb2818b7
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • anubis

C2
  • http://wadascx1wesa.club/admin_panel/

Targets

    • Target
      5bb0e4469e0d98df5c0ab4c60360c88246a41f6c30e677954a5a2fe5eb2818b7
    • Size 207KB
    • SHA256 5bb0e4469e0d98df5c0ab4c60360c88246a41f6c30e677954a5a2fe5eb2818b7
    • MD5 SHA1 SHA512
    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks