Resubmissions

11/05/2026, 13:56

260511-q8w5pse13p10

10/05/2026, 21:14

260510-z3bq9ah13l10

General

  • Target
    57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad.apk
  • Size 285KB
  • Sample260511-q8w5pse13p
  • SHA256 57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • anubis

C2
  • http://cukurrentcarskartelimdfer.tk

Attributes
  • target_apps

    MyING.be

    aib.ibank.android

    alior.bankingapp.android

    at.easybank.securityapp

    at.psa.app.bawag

    at.spardat.bcrmobile

    at.spardat.netbanking

    au.com.bankwest.mobile

    au.com.cua.mb

    au.com.mebank.banking

    au.com.nab.mobile

    au.com.newcastlepermanent

    au.com.suncorp.SuncorpBank

    ccom.tmob.denizbank

    com.DijitalSahne.EnYakinHalkbank

    com.FubonMobileClient

    com.MobileTreeApp

    com.Plus500

    com.abnamro.nl.mobile.payments

    com.advantage.RaiffeisenBank

    com.aff.otpdirekt

    com.amazon.windowshop

    com.att.myWireless

    com.axis.mobile

    com.bankaustria.android.olb

    com.bankia.wallet

    com.bankinter.launcher

    com.bankofamerica.cashpromobile

    com.bankofqueensland.boq

    com.barclays.android.barclaysmobilebanking

Signatures

  • Family: Anubis banker

    Android banker that uses overlays.

  • Anubis payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad.apk
    .apk 285KB

57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad.apk

  • SHA256 57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Anubis payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
f8136930037f017c885af72f3b838081434ecb00e3a0f366e6f06bbc2b73aa68
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
wocwvy.czyxoxmbauu.slsa

Android Permissions

57c9563a1e3adc9737eae84b6fb3f45aa98621ab4d1bced43eeef5e35fee9aad.apk

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS