Overview

overview

10

Static

static

8

Android APK

android_x86

10

Analysis

  • max time kernel
    2152731s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    06-07-2021 11:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c3c3394e459bb244e9e5a6923739086b0cd37b51c732bce7fed63db9a9ee2d2b.apk

  • Size

    3.9MB

  • MD5

    2e34b6fdf50aad8adad407bb49d79a2d

  • SHA1

    ca73e698212f5e829305d3d1e882592e21aaa6a8

  • SHA256

    c3c3394e459bb244e9e5a6923739086b0cd37b51c732bce7fed63db9a9ee2d2b

  • SHA512

    275d66589750742c0d2cff4e536dc422d4733f329e108d90f87fc596c9dde9d79ad4ab741e2893a00e14b00b5faa8151284304b91f3ea189040c16329eb96a9f

Score
10/10
flubotbankerinfostealerobfuscationransomwaretrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 2 IoCs
  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware
  • Uses reflection 1 IoCs
    obfuscation

Processes

  • com.baidu.BaiduMap
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    • Uses reflection
    PID:4895
    • com.baidu.BaiduMap
      2⤵
        PID:4956
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:4956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/bPjniyxD.tf
      MD5

      f719ea16da07a8f2f10781be198153ba

      SHA1

      9127eecc1a7e0101f02d6d32d1ab486a205a71f1

      SHA256

      c6b5133767cdb3157e4a6211d3090d247e1fb6e0a3c1d0cfb9094550c5996a1b

      SHA512

      5644af17471cd4e95bfdfe0e6c5dc4adc392ada2ecd90c43317edefceabe6c0b997ca2194e3723f3184a360563676afe55d69fb99d84443645f1bd5ca7ba946a

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/bPjniyxD.tf
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/bPjniyxD.tf
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/bPjniyxD.tf
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/bPjniyxD.tf.x86.flock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/oat/x86/bPjniyxD.odex
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/app_apkprotector_dex/oat/x86/bPjniyxD.vdex
      MD5

      175fb707f52c86f9d7ec0f6273738405

      SHA1

      028152cd2c754c060b43cd36edc6b3b6cf4aea44

      SHA256

      174c1abd459baba385bd7dcc1ee86abd689e98675f5e0b6f592da28a6a6b78aa

      SHA512

      d151dee21d170cef01055026cf54974873610d6259da913fbc987d10d804c48a481fba2464c47fe903bdee6e9ab341dc3a01bfde1d2b2f6e08d9603dcec44728

      Download Submit
    • /data/user/0/com.baidu.BaiduMap/shared_prefs/DHL.xml
      MD5

      e4066b73bf7c39ec598c8fff88f83fe1

      SHA1

      9e82f4b620c1bd7b59e35f81ba954d8a6f0d05ac

      SHA256

      6124ffa0f5aa017d837d2905dace4ed73a7387242b01559b62fbf0e31f530ca8

      SHA512

      f406831c77b64cfb5e219213467b248320dd33be23d7f51c75e44a44cfc6a5ce10fa7cefe900410c692c9aed9b50a9aa40547e03bd26f519562d4ddac91b0214

      Download Submit