General

  • Target

    40aa6f968973ce35adf461872d5aa44fd64bd35c6bc50f6d4e7228239c22c0d2.bin

  • Size

    4.4MB

  • MD5

    963b8373e3ab385651cfbe4d0d226d19

  • SHA1

    7587a27b6ebabf7e56b75c4e931851295cd39007

  • SHA256

    40aa6f968973ce35adf461872d5aa44fd64bd35c6bc50f6d4e7228239c22c0d2

  • SHA512

    46cef2cfd195c6c1bd110fcf33219f6c9117e0788f69e9969c2cb5e77c356e778a9be6d4090a17fc844e5a5b6648e053fa0d09fa118df483a63d1e49939abf7b

  • SSDEEP

    98304:ZHfrbzjXCFpZpKmqk5sjcstp0ZU05uZEpSYcNQ6i2infseJjPUYl:1Skk5sjXcoZiFIOsyMk

Score
10/10

Malware Config

Extracted

Family

anubis

C2

https://google.com

Signatures

  • Anubis family
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 48 IoCs

Files

  • 40aa6f968973ce35adf461872d5aa44fd64bd35c6bc50f6d4e7228239c22c0d2.bin
    .apk android

    com.tencent.mm

    com.system.myapplication.Jvm.LocalFragment


Android Permissions

40aa6f968973ce35adf461872d5aa44fd64bd35c6bc50f6d4e7228239c22c0d2.bin

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE