Analysis
-
max time kernel
3749744s -
max time network
36s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
submitted
08-07-2022 16:57
General
-
Target
5bb0e4469e0d98df5c0ab4c60360c88246a41f6c30e677954a5a2fe5eb2818b7.apk
-
Size
207KB
-
MD5
01bc9a13dd0b091b2ddce9ee2e682c0c
-
SHA1
5ecc5dd65118441b067bf2a9b5451d7a90ae124a
-
SHA256
5bb0e4469e0d98df5c0ab4c60360c88246a41f6c30e677954a5a2fe5eb2818b7
-
SHA512
fd1487ec14c5ee6e8e8d0c0464e95e00d07f6725985b6d5b965960a3fa88193cf989b774794388645d5a56037ba8f13160de6023017c23b22281cd1d67e4fca0
Score
10/10
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Acquires the wake lock. 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes
-
wocwvy.czyxoxmbauu.slsa1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation).