anubis | f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb[.]bin

General

Target
f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb.bin
Size 281KB
Sample250415-12hzlsxvbv
SHA256 f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb
MD5 cfdcfabea189d3d30b7625042665b6fa
SHA1 4172e4cdef0fed8f5078799f68d57a52aac7d69a
SHA512 bb17958fc7cfe28a37ea7b57e3ab76b1cd62062a1e44d7282c0a15e75f5d3643c4cc20b8a784d495e6a0e64c6dfb4ea4ca7b1e51140b7ce62ff52422a3ee12ce
SSDEEP 6144:U/IdI2eA/L62As4aVrTqRKaRK2RKZRKURKC:TIy/ZjTZ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

anubis

Malware Config

Extracted

Family

anubis

C2

aHR0cDovLzE5Mi4xNjguMS44OC8=

Signatures

Anubis family
anubis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb.bin

.apk 281KB

f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb.bin

SHA256 f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb
MD5 cfdcfabea189d3d30b7625042665b6fa
SHA1 4172e4cdef0fed8f5078799f68d57a52aac7d69a
SHA512 bb17958fc7cfe28a37ea7b57e3ab76b1cd62062a1e44d7282c0a15e75f5d3643c4cc20b8a784d495e6a0e64c6dfb4ea4ca7b1e51140b7ce62ff52422a3ee12ce
SSDEEP 6144:U/IdI2eA/L62As4aVrTqRKaRK2RKZRKURKC:TIy/ZjTZ
MD5 SHA1 SHA512 SSDEEP

android

com.mykeyfel

Android Permissions

f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb.bin

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb.bin

com.google.android.gms.common.api.GoogleApiActivity

com.mykeyfel.ncec.myvbo

com.mykeyfel.opzsdswiddt

com.mykeyfel.ncec.sxfl

com.mykeyfel.comn.e.cwwzcpcu

com.mykeyfel.ncec.pltrfi

com.mykeyfel.ncec.wami

com.mykeyfel.ncec.fyqapyahei

com.mykeyfel.ncec.bdxyqqt

com.mykeyfel.ncec.dzudmx

com.mykeyfel.ncec.gcmysyhtova

com.mykeyfel.ncec.ozkgyjpxtyxajmm

com.mykeyfel.ncec.khypzruy

com.mykeyfel.ncec.kcdbt

com.mykeyfel.ncec.fymeshs

com.mykeyfel.ncec.ovyvpsbxxrtayd

com.mykeyfel.ncec.zjwruw

com.mykeyfel.lmimy

com.mykeyfel.wfveenegvz

com.mykeyfel.frvvkgp

com.mykeyfel.ukhakhcgifofl

com.mykeyfel.jtfxlnc

com.mykeyfel.blkzyyyfc

com.mykeyfel.whemsbk

com.mykeyfel.nepgaqmyfrhw

com.mykeyfel.clgqtzqdh

com.mykeyfel.usbvhkriufnc

com.mykeyfel.egxltnv

com.mykeyfel.kldqwysgkfcrmq

com.mykeyfel.comn.e.jkeggfql

com.mykeyfel.comn.e.nvsdtnxkzjgw

com.mykeyfel.comn.d.brtltydqhiuqbb

com.mykeyfel.xelytgswelv

com.mykeyfel.mvqkjokaxfrpf

com.mykeyfel.wahiuolww

com.mykeyfel.comn.d.cpysnikhf

com.mykeyfel.comn.c.wifu

com.mykeyfel.comn.c.dshd

com.mykeyfel.kuv.sfswwunyakpjr

com.mykeyfel.ttiegryczsx

com.mykeyfel.blyvffs

com.mykeyfel.part.cmtstflxlxb

com.mykeyfel.part.qpgopfninoaazln

com.mykeyfel.part.hypihteeavv

com.mykeyfel.part.hwfe

Android Permissions

f89b63be2435fdad3d49cff0b431d345b6ed5fdb726942d71d0849f12f21c2cb.bin