Analysis

  • max time kernel
    3294549s
  • max time network
    71s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
  • submitted
    22-08-2022 07:04

General

  • Target

    a3ffaeed53114c189522393e4c24bddc.apk

  • Size

    258KB

  • MD5

    a3ffaeed53114c189522393e4c24bddc

  • SHA1

    98fe874c4321f717cd773772fd1ac366b660ae3e

  • SHA256

    781f2d494faa4fc861aee91c2925afd6468a537082d18c9ebb85e050bd7b5f89

  • SHA512

    450b893a8c0b6a06c80c19a96540431c7cbc7ab42dcb0295d4d89851af625fce6dc26b2a704f93dae4615fcc2b95b72f200db0c94214e8a4e53fbd3c9ac5d9d6

Malware Config

Signatures

  • Anubis banker

    Android banker that uses overlays.

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests enabling of the accessibility settings. 1 IoCs
  • Reads information about phone network operator.
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • app.online.myapplication
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests enabling of the accessibility settings.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:4400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads