Analysis
-
max time kernel
3209347s -
max time network
136s -
platform
android_x64 -
resource
android-x64-20220621-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system -
submitted
21-08-2022 07:23
Static task
static1
Behavioral task
behavioral1
Sample
005e033dc1dfbfb9d2a3989e91705ab9.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
005e033dc1dfbfb9d2a3989e91705ab9.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
005e033dc1dfbfb9d2a3989e91705ab9.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
005e033dc1dfbfb9d2a3989e91705ab9.apk
-
Size
1.2MB
-
MD5
005e033dc1dfbfb9d2a3989e91705ab9
-
SHA1
631fac97cabfbad8f73da4aa550e359e012d3125
-
SHA256
7db9ad455ad55e81b10ec87a25b1f02bdad8fcbd7326f96f7d367c456f8b5921
-
SHA512
c4ffc229754f073dd115fc2474f9851ce3de546dcf4f801af022445c98d38c23f28ad2d5a50c54605f6c49dd1c9e657c9c46c99957759144db09f1c400af1246
Malware Config
Signatures
-
Anubis banker
Android banker that uses overlays.
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.viable.bind/app_DynamicOptDex/KOMr.json 5802 com.viable.bind -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.viable.bind
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
179KB
MD54deb711f7689fda04d586d6c1047fd10
SHA1a5c0cd8e1c4b003883a87ab18c3846bfbf05235c
SHA2567ea457c877671a8dab7ec3b1de4385d5e3d36875acde3312dece2444090ba311
SHA5122063b3c6b36c3988f9903d89aebeb197b510c6931150da2daea91356789246151e06baf10ac83aba5ad902ea5986a5fc12c1e0b56f9f5e455b7342d79a604b41
-
Filesize
367KB
MD52886360a17407e43e2d9c548d1bfdad1
SHA1ed7151dba5039669b3e9eead25ba84f961a540ce
SHA2562895c5f0815dc4fca105725f58f6dd32984192d1904d123e1a9f28f032d5a9dc
SHA512784dfec3690848fa71be1c8c99fb8c4159e673f7c7c2a674a6928927a574d88101ada07548228315c0e5a17066ee27a2233b713669864eff824766fee3009a2c