Overview

overview

10

Static

static

6

eb22cda0c0...12.apk

android-9-x86

10

eb22cda0c0...12.apk

android-10-x64

10

eb22cda0c0...12.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb22cda0c0e7b299d6cffe02ef3b04d7b2de7b16f27ad7b6058753c5f2723f12.bin

  • Size

    457KB

  • Sample

    240124-1x4eraabgk

  • MD5

    be4418728de05dd953326c1380a3219c

  • SHA1

    447586421fcb94398da3d97cd9edc17a21b75bb3

  • SHA256

    eb22cda0c0e7b299d6cffe02ef3b04d7b2de7b16f27ad7b6058753c5f2723f12

  • SHA512

    1f7b0442b828c7f0cd9a169ba7b053c4d1bffca148fe1bb9cf1f71389027261e5524eff0dd586c91755a466be62caef9d5de676a82165f8f736fbd43c3d54ddc

  • SSDEEP

    12288:8kZHjTlNHRZK/NAisRNwMoiwPXAbMpLxNwMoiwPXAbMpLH:8KnHR+sjmiwPQwZmiwPQwZ

Score
10/10
anubisandroidbankerevasioninfostealerstealthtrojan

Malware Config

Extracted

Family

anubis

C2

https://fhghfghfghfghfghf

Targets

    • Target

      eb22cda0c0e7b299d6cffe02ef3b04d7b2de7b16f27ad7b6058753c5f2723f12.bin

    • Size

      457KB

    • MD5

      be4418728de05dd953326c1380a3219c

    • SHA1

      447586421fcb94398da3d97cd9edc17a21b75bb3

    • SHA256

      eb22cda0c0e7b299d6cffe02ef3b04d7b2de7b16f27ad7b6058753c5f2723f12

    • SHA512

      1f7b0442b828c7f0cd9a169ba7b053c4d1bffca148fe1bb9cf1f71389027261e5524eff0dd586c91755a466be62caef9d5de676a82165f8f736fbd43c3d54ddc

    • SSDEEP

      12288:8kZHjTlNHRZK/NAisRNwMoiwPXAbMpLxNwMoiwPXAbMpLH:8KnHR+sjmiwPQwZmiwPQwZ

    Score
    10/10
    anubisbankerevasioninfostealerstealthtrojan

    • Anubis banker

      Android banker that uses overlays.

      bankertrojaninfostealeranubis

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks