Anubis IOCs

Indicators of Compromise (IoCs):
Hashes related to Anubis (SHA-256) detected as AndroidOS_AnubisDropper:

9046270d735579bcedb6bb7c0a2ad21f9b5ef9432e46e733b36de964aecd3abc (labeled Operatör Güncellemesi)
6079af3bab8bb0ba445cd0dd896d8c8d7845da3757755b4ef3af584d227e0490 (labeled Operatör Güncellemesi)
1acca6953081cfc12d5cbeda1990b93b3298b1adc3c6ffad624e454f5854736f (labeled Google Services)
f767baadda60c618d7e14461831e7371a54cdf152b1fd5eb52a8aa4bb7300227 (labeled Google Services)
Domains related to Anubis’ C&C activities:

hxxp://demo[.]website[.]com/
hxxp://ktosdelaetskrintotpidor[.]com
hxxp://marksteylor[.]us/
hxxp://sositehuypidarasi[.]com
hxxps://blackleaf[.]top
hxxps://firstdoxed[.]space
hxxps://lskbfidsbvkjsfgakfjsdffsdfupdate[.]net
hxxps://lskbfidsbvkjsfgakfjsdffsdfupdate[.]net/o1o/a16[.]php
hxxps://ndudetto[.]top
hxxps://playclints1[.]space
hxxps://sositehuypidarasi[.]com
hxxps://t[.]me/newpaparoni
hxxps://t[.]me/thethe123
hxxps://t[.]me/unite11