Analysis
-
max time kernel
3043483s -
max time network
113s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system -
submitted
19-08-2022 09:19
Static task
static1
Behavioral task
behavioral1
Sample
ac0a6a4fc30c1bc6a27d3151d210d376.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
ac0a6a4fc30c1bc6a27d3151d210d376.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
ac0a6a4fc30c1bc6a27d3151d210d376.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
ac0a6a4fc30c1bc6a27d3151d210d376.apk
-
Size
258KB
-
MD5
ac0a6a4fc30c1bc6a27d3151d210d376
-
SHA1
14ffb8fc6b9c68848790a01eccf774128899c1a4
-
SHA256
3c78ba7a76315c819348209bf1fe499e08daa74155fa283e94499119fd3d27c5
-
SHA512
7f8b242361aefe7ab2c0ba7abd577b0e4df2885ce3d94b824629d63a1f7e3bff4832f7f8fdbca0989ea0708bb91ea3228ac7222f1efb03bf6f64f09fc7e2355f
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Makes use of the framework's Accessibility service. 2 IoCs
Processes:
app.online.myapplicationdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText app.online.myapplication Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId app.online.myapplication -
Acquires the wake lock. 1 IoCs
Processes:
app.online.myapplicationdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock app.online.myapplication -
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes:
app.online.myapplicationdescription ioc process Framework API call android.hardware.SensorManager.registerListener app.online.myapplication