Overview

overview

10

Static

static

10

045c244a5a...95.apk

android-9-x86

10

045c244a5a...95.apk

android-10-x64

10

045c244a5a...95.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    045c244a5adf9ef2c911c3dd4d8c5b95.apk

  • Size

    577KB

  • Sample

    220831-n2hmmafdb2

  • MD5

    045c244a5adf9ef2c911c3dd4d8c5b95

  • SHA1

    58aa5eaefda4e2eb5fa98de8410031ebd5767991

  • SHA256

    a092c8113d2ac18bbdf5b0cb4944a9662bbcb7d7c6da950cc5820ce8f42307fd

  • SHA512

    2aa3969e7e7a0e73b73c8534b7ce2cdcb6a9849b0ade5fc1711f1600e0dabc2e38718f146cca8c2d40d5090e35278a2bcc49b68d1a639058e9501cbc3b747903

  • SSDEEP

    6144:SY6pj72sI7xmHJSAdUis4aVrTifL2AcuUfL2Acu+fL2AcuRfL2Acu0fL2Acu9:SYmYCJSLrjT+J+JsJHJiJv

Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

anubis

C2

http://192.168.89.107/anubis

Targets

    • Target

      045c244a5adf9ef2c911c3dd4d8c5b95.apk

    • Size

      577KB

    • MD5

      045c244a5adf9ef2c911c3dd4d8c5b95

    • SHA1

      58aa5eaefda4e2eb5fa98de8410031ebd5767991

    • SHA256

      a092c8113d2ac18bbdf5b0cb4944a9662bbcb7d7c6da950cc5820ce8f42307fd

    • SHA512

      2aa3969e7e7a0e73b73c8534b7ce2cdcb6a9849b0ade5fc1711f1600e0dabc2e38718f146cca8c2d40d5090e35278a2bcc49b68d1a639058e9501cbc3b747903

    • SSDEEP

      6144:SY6pj72sI7xmHJSAdUis4aVrTifL2AcuUfL2Acu+fL2AcuRfL2Acu0fL2Acu9:SYmYCJSLrjT+J+JsJHJiJv

    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks