anubis | 61705cb4ce8204ef7fbed52141c1594af3360fb378fef853f8282a56403a6ac2 | Triage

Analysis

max time kernel
2961182s
max time network
88s
platform
android_x64
resource
android-x64-20220621-en
resource tags

androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system
submitted
18-08-2022 10:27

Sharing

Report Analysis Logs

General

Target

16563634ddc5a49ead97115e984d02b9.apk
Size

258KB
MD5

16563634ddc5a49ead97115e984d02b9
SHA1

e5d118ee6834de783af30265f024e6c8e4b5ace3
SHA256

61705cb4ce8204ef7fbed52141c1594af3360fb378fef853f8282a56403a6ac2
SHA512

3e6c28ad52d35fb478d7cf97f9abb789c41e4d7df057182063acc640e628b0bf8e123c33cc4626a1e227199d79ebc9902a8bfd9b428edb85a2bc4bc45149a5b7

Score

10^/10

anubis banker evasion infostealer trojan

Malware Config

Signatures

Anubis banker
Android banker that uses overlays.
banker trojan infostealer anubis
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

app.online.myapplication

description ioc process

Framework API call android.hardware.SensorManager.registerListener app.online.myapplication

app.online.myapplication
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:5541

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...