Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Block Anatsa, Brunhilda and Gymdrop banking malware #31

Closed
1 task done
summercms opened this issue Sep 27, 2023 · 0 comments
Closed
1 task done

Block Anatsa, Brunhilda and Gymdrop banking malware #31

summercms opened this issue Sep 27, 2023 · 0 comments
Labels
Code Update 🔔 Code Update enhancement 👍 New feature or request FINSIHED FINSIHED Priority: Medium Priority: Medium Testing - Passed Testing - Passed

Comments

@summercms
Copy link
Contributor

summercms commented Sep 27, 2023 •
edited

Enhancement idea

  • Block Anatsa, Brunhilda and Gymdrop banking malware.

Links

https://www.threatfabric.com/blogs/google-play-droppers

https://threatfox.abuse.ch/browse/malware/apk.anatsa/

IOC

Domains

Gymdrop Dropper C2 Domain:

onlinefitnessanalysis.com

Brunhilda Dropper C2 Domains:

protectionguardapp.club
readyqrscanner.club
flowdivison.club
multifuctionscanner.club

IP's

Anatsa Dropper C2 IP's:

195.201.70.88
178.63.27.179
91.242.229.85
195.201.70.89
@summercms summercms added Code Update 🔔 Code Update In-progress In-progress Priority: Medium Priority: Medium enhancement 👍 New feature or request labels Sep 27, 2023
@summercms summercms mentioned this issue Oct 2, 2023
Merged
@summercms summercms added FINSIHED FINSIHED Testing - Passed Testing - Passed and removed In-progress In-progress labels Oct 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Code Update 🔔 Code Update enhancement 👍 New feature or request FINSIHED FINSIHED Priority: Medium Priority: Medium Testing - Passed Testing - Passed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@summercms