Overview

overview

10

Static

static

8

ffaebdbc8c...24.apk

android_x64

10

Resubmissions

15-06-2021 18:35

210615-nab8r25hp6 10

15-06-2021 15:20

210615-a9th5lxqa2 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

  • Size

    3.8MB

  • Sample

    210615-nab8r25hp6

  • MD5

    10f8ddd80b1eb94540b5aace12b8824a

  • SHA1

    5f6d13b57112441cd92a9cd2f9d115d9e492f158

  • SHA256

    ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

  • SHA512

    66ed579fa60280488142c6fce852bb8751b7cab2f7e323ba05c62bc925b24e4da2cf8733a2ab5c63bbd5ef128108d23398d33d052fd574fc40ed368c75ffb5a0

Score
10/10
flubotandroidbankerinfostealerobfuscationransomwaretrojan

Malware Config

Targets

    • Target

      ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

    • Size

      3.8MB

    • MD5

      10f8ddd80b1eb94540b5aace12b8824a

    • SHA1

      5f6d13b57112441cd92a9cd2f9d115d9e492f158

    • SHA256

      ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

    • SHA512

      66ed579fa60280488142c6fce852bb8751b7cab2f7e323ba05c62bc925b24e4da2cf8733a2ab5c63bbd5ef128108d23398d33d052fd574fc40ed368c75ffb5a0

    Score
    10/10
    flubotbankerinfostealerobfuscationransomwaretrojan

    • FluBot

      FluBot is an android banking trojan that uses overlays.

      bankertrojaninfostealerflubot

    • FluBot Payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks