Overview

overview

10

Static

static

10

8cb941658e...5e.apk

android-9-x86

10

8cb941658e...5e.apk

android-10-x64

10

8cb941658e...5e.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cb941658ed8340b67a38a47162ab8850b89a14eee2899f0761fadd4f648fd5e.apk

  • Size

    213KB

  • Sample

    230117-2ez52sdf81

  • MD5

    ba7b1ba0830e11da60dec1c90632515d

  • SHA1

    b0a38160d78f9d0799c646d9f21ab65afb917202

  • SHA256

    8cb941658ed8340b67a38a47162ab8850b89a14eee2899f0761fadd4f648fd5e

  • SHA512

    b53be16ce325c094dd6c1188605b8abc1fbb7c085a4cacd9f9649d9fd4143e70ae9c49a718747f46860e0c3899704a8bd379c104107ad565fa6df980ba00d420

  • SSDEEP

    3072:daC6U6a1PPE/387RpOnzy3fmhbGluwXK6boURb0gqJo0DK0z5StS:sB9a1PgMOnzhxGlZjb0n9DK00I

Score
10/10
anubisandroidbankerevasioninfostealertrojan

Malware Config

Extracted

Family

anubis

C2

http://sosyalkampanya2.tk/dedebus/

Targets

    • Target

      8cb941658ed8340b67a38a47162ab8850b89a14eee2899f0761fadd4f648fd5e.apk

    • Size

      213KB

    • MD5

      ba7b1ba0830e11da60dec1c90632515d

    • SHA1

      b0a38160d78f9d0799c646d9f21ab65afb917202

    • SHA256

      8cb941658ed8340b67a38a47162ab8850b89a14eee2899f0761fadd4f648fd5e

    • SHA512

      b53be16ce325c094dd6c1188605b8abc1fbb7c085a4cacd9f9649d9fd4143e70ae9c49a718747f46860e0c3899704a8bd379c104107ad565fa6df980ba00d420

    • SSDEEP

      3072:daC6U6a1PPE/387RpOnzy3fmhbGluwXK6boURb0gqJo0DK0z5StS:sB9a1PgMOnzhxGlZjb0n9DK00I

    Score
    10/10
    anubisbankerevasioninfostealertrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks