General

  • Target

    e2bdf77b7cbd952f92e62a1a1c1973158ca5df817f9b0bed9bad2a0b8ec58cc1

  • Size

    165KB

  • Sample

    220816-pb4mvaggdm

  • MD5

    b690ef44bc8def7fa9c95a10fb9d9ade

  • SHA1

    a67a01a5df61738e32a01aea54c9a42b25014f07

  • SHA256

    e2bdf77b7cbd952f92e62a1a1c1973158ca5df817f9b0bed9bad2a0b8ec58cc1

  • SHA512

    d3b937265c81db15ff0e4e4d636f67f87d2a92fbc512bf0706b59957c5eb22cca91978cc85c815a9418debe8e4aad0e70e9f7102b53ba47ca6fe27b89bf878a3

Malware Config

Extracted

Family

anubis

C2

http://192.168.0.104

Targets

    • Target

      e2bdf77b7cbd952f92e62a1a1c1973158ca5df817f9b0bed9bad2a0b8ec58cc1

    • Size

      165KB

    • MD5

      b690ef44bc8def7fa9c95a10fb9d9ade

    • SHA1

      a67a01a5df61738e32a01aea54c9a42b25014f07

    • SHA256

      e2bdf77b7cbd952f92e62a1a1c1973158ca5df817f9b0bed9bad2a0b8ec58cc1

    • SHA512

      d3b937265c81db15ff0e4e4d636f67f87d2a92fbc512bf0706b59957c5eb22cca91978cc85c815a9418debe8e4aad0e70e9f7102b53ba47ca6fe27b89bf878a3

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

MITRE ATT&CK Matrix

Tasks