Resubmissions

18-08-2022 13:17

220818-qjnf9shhf3 10

General

  • Target

    eda525375692b2217a9a12aad727fb4c.apk

  • Size

    258KB

  • Sample

    220818-qjnf9shhf3

  • MD5

    eda525375692b2217a9a12aad727fb4c

  • SHA1

    16a0c2426e88b72902bd5f9900c0ebe4955b6029

  • SHA256

    4aaefc66c082701e09bc1690f83571944b748bc0c958334cd505beebcc2ed4aa

  • SHA512

    bd1915f8c497a20f4bbd409e332dc9c28736c854537e796ce9641a2d8093aeb5cd510b5e7da22477e1afa2ad7623aba3d1443a6f4b23c5eb73c94d05c57d42bf

  • SSDEEP

    6144:W+9aeTUqhjcg10Xxi/O6AzFFMS00uM+zMf:WedUqhjcg10B2AJUM+zMf

Malware Config

Targets

    • Target

      eda525375692b2217a9a12aad727fb4c.apk

    • Size

      258KB

    • MD5

      eda525375692b2217a9a12aad727fb4c

    • SHA1

      16a0c2426e88b72902bd5f9900c0ebe4955b6029

    • SHA256

      4aaefc66c082701e09bc1690f83571944b748bc0c958334cd505beebcc2ed4aa

    • SHA512

      bd1915f8c497a20f4bbd409e332dc9c28736c854537e796ce9641a2d8093aeb5cd510b5e7da22477e1afa2ad7623aba3d1443a6f4b23c5eb73c94d05c57d42bf

    • SSDEEP

      6144:W+9aeTUqhjcg10Xxi/O6AzFFMS00uM+zMf:WedUqhjcg10B2AJUM+zMf

    • Anubis banker

      Android banker that uses overlays.

    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks